{"report_id":"ddceb142-4249-4901-9282-580c1bd45012","version":6,"status":"done","tags":["suspicious"],"date":"2024-08-23T12:20:27Z","url":{"schema":"http","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"104.26.8.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"title":"Despicable Me 4 2024 Multi Vfq - DoodStream"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-07T18:08:51Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ey.dramshaplite.com","ip":{"addr":"23.109.170.72","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-07-31","domain_rank":0,"first_seen":"2024-08-03 14:40:08","last_seen":"2024-08-21 11:00:58","alert_count":1,"request_count":1,"received_data":1451,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"proftrafficcounter.com","ip":{"addr":"3.123.210.174","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2023-11-16","domain_rank":0,"first_seen":"2023-11-21 09:55:14","last_seen":"2024-08-23 00:08:53","alert_count":0,"request_count":2,"received_data":704,"sent_data":902,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.creative-bars1.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-11-01","domain_rank":0,"first_seen":"2022-11-15 17:46:22","last_seen":"2024-08-23 00:08:51","alert_count":0,"request_count":5,"received_data":102354,"sent_data":2232,"comment":"","tags":null,"fingerprints":null},{"fqdn":"niersfohiplaceof.info","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-07-08","domain_rank":0,"first_seen":"2024-08-22 20:59:31","last_seen":"2024-08-22 20:59:31","alert_count":0,"request_count":4,"received_data":2452,"sent_data":2132,"comment":"","tags":null,"fingerprints":null},{"fqdn":"recordedthereby.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-05-08","domain_rank":0,"first_seen":"2024-05-14 07:24:53","last_seen":"2024-08-23 09:23:49","alert_count":0,"request_count":1,"received_data":28916,"sent_data":392,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2016-03-20 13:44:49","last_seen":"2024-08-22 18:12:09","alert_count":0,"request_count":6,"received_data":12664,"sent_data":3625,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unseenreport.com","ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-03-30","domain_rank":0,"first_seen":"2022-03-30 16:33:17","last_seen":"2024-08-22 21:16:31","alert_count":2,"request_count":2,"received_data":942,"sent_data":1454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.barscreative1.com","ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-09-08","domain_rank":25648,"first_seen":"2021-09-16 13:14:42","last_seen":"2024-08-23 00:08:50","alert_count":0,"request_count":1,"received_data":2188,"sent_data":474,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-08-22 18:12:25","alert_count":0,"request_count":9,"received_data":7989,"sent_data":2943,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d3eub2e21dc6h0.cloudfront.net","ip":{"addr":"54.230.241.62","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-10-02 21:01:08","last_seen":"2024-08-21 11:00:58","alert_count":0,"request_count":2,"received_data":70531,"sent_data":1075,"comment":"","tags":null,"fingerprints":null},{"fqdn":"troubledcontradiction.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-04-08","domain_rank":0,"first_seen":"2024-05-25 14:47:33","last_seen":"2024-07-06 22:40:29","alert_count":0,"request_count":1,"received_data":14741,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"getrunkhomuto.info","ip":{"addr":"108.157.229.111","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-03-31","domain_rank":0,"first_seen":"2024-03-31 12:52:35","last_seen":"2024-08-22 20:59:31","alert_count":0,"request_count":1,"received_data":1824,"sent_data":934,"comment":"","tags":null,"fingerprints":null},{"fqdn":"handbagwishesliver.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-07-01","domain_rank":0,"first_seen":"2024-07-01 20:28:25","last_seen":"2024-08-23 11:05:13","alert_count":0,"request_count":5,"received_data":107545,"sent_data":4880,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.doodcdn.com","ip":{"addr":"172.67.208.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2020-01-30","domain_rank":56705,"first_seen":"2020-04-06 17:51:16","last_seen":"2024-08-22 20:59:31","alert_count":0,"request_count":1,"received_data":850,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"waisheph.com","ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2020-11-23","domain_rank":74994,"first_seen":"2020-12-10 01:25:39","last_seen":"2024-08-23 08:53:47","alert_count":0,"request_count":3,"received_data":38373,"sent_data":1981,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.r2m03.amazontrust.com","ip":{"addr":"54.230.218.11","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-05-11","domain_rank":0,"first_seen":"2023-02-21 01:06:24","last_seen":"2024-08-23 10:07:20","alert_count":0,"request_count":1,"received_data":942,"sent_data":338,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2024-08-22 22:21:34","alert_count":0,"request_count":1,"received_data":7636,"sent_data":418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-08-22 18:12:04","alert_count":0,"request_count":6,"received_data":5322,"sent_data":1962,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.doodcdn.co","ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-23","domain_rank":0,"first_seen":"2022-05-04 16:24:45","last_seen":"2024-08-22 20:59:30","alert_count":0,"request_count":2,"received_data":255870,"sent_data":886,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":0,"first_seen":"2024-04-24 13:44:57","last_seen":"2024-08-22 18:12:38","alert_count":0,"request_count":8,"received_data":5599,"sent_data":2600,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04 10:54:57","last_seen":"2024-08-22 21:10:19","alert_count":0,"request_count":1,"received_data":736,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pogothere.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-08-22","domain_rank":0,"first_seen":"2022-09-04 21:11:25","last_seen":"2024-08-22 20:59:31","alert_count":0,"request_count":2,"received_data":104074,"sent_data":816,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2024-08-23 08:50:55","alert_count":0,"request_count":4,"received_data":171592,"sent_data":1727,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.doodcdn.co","ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-23","domain_rank":0,"first_seen":"2024-01-08 03:43:30","last_seen":"2024-08-22 20:59:31","alert_count":0,"request_count":1,"received_data":113654,"sent_data":396,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dood.li","ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2016-01-03 06:47:59","last_seen":"2024-08-21 11:00:58","alert_count":1,"request_count":3,"received_data":17434,"sent_data":1479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"blurbreimbursetrombone.com","ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-17","domain_rank":0,"first_seen":"2024-05-24 14:00:25","last_seen":"2024-08-22 20:59:31","alert_count":0,"request_count":4,"received_data":144642,"sent_data":2927,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dm545lq.cloudatacdn.com","ip":{"addr":"15.235.118.201","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":15690,"sent_data":397,"comment":"","tags":null,"fingerprints":null},{"fqdn":"scaredframe.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-06-27","domain_rank":0,"first_seen":"2024-08-20 12:31:29","last_seen":"2024-08-22 20:33:01","alert_count":0,"request_count":1,"received_data":490,"sent_data":474,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.doodcdn.co","ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-23","domain_rank":0,"first_seen":"2022-05-04 16:24:43","last_seen":"2024-08-22 20:59:29","alert_count":0,"request_count":7,"received_data":154781,"sent_data":3042,"comment":"","tags":null,"fingerprints":null},{"fqdn":"anceenablesas.com","ip":{"addr":"108.157.229.33","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1824,"sent_data":935,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.cloudimagesb.com","ip":{"addr":"45.133.44.9","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-10-06","domain_rank":23099,"first_seen":"2021-02-12 17:15:41","last_seen":"2024-08-23 00:08:52","alert_count":0,"request_count":2,"received_data":70327,"sent_data":932,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2024-08-22 18:12:24","alert_count":0,"request_count":2,"received_data":38798,"sent_data":1024,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-23","alert":"Sinkholed","trigger":"dramshaplite.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-23","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-23","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d23fda45375854c5a348cbd57685ab","sha1":"242bf3eaae0ad9bfe98e3e8636d0437eca4a5308","sha256":"f43914f154147131777247d2d3e8ded058641629edf287d1c44c7f325315531b","sha512":"e3da0beb5dde52a00b9214f661b19b8cd5919a3d581281d105cc059bb334a59103aac1dc2e080fb24b35582f623b0e3b241c8f9abd4daa25fc56aeecd0ff8081","ssdeep":"1536:zWTyQvha6YG0HQ5K3G5ArWtSbYMT9tzmZkpSwq3zHceiCym/2qFPJTcZyj6L6m3G:zWmQxYG0HcKCExtzmZk8wq3zHXi0Bekv","tlshash":"0ad3ea8b6e9569b90903a0e755fa9042785ef85f6cc84764b02dd2cbfef4214c13ab73","size":131988,"data":"","first_seen":"2024-08-29T18:08:52.116688Z","last_seen":"2024-08-29T18:08:52.116688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"397d14f1a2a741c28224727df7a66dec","sha1":"4bc2453f5438fb2676c41c4fa22b55ddc490a452","sha256":"5bb8e8ddd5a2a82be476d62e4cf566e4e4f7c0bc3e86b8a2726693abbcaf3e1e","sha512":"fc5dfe9dd07e0bb1a41e5f2564036cee71593fca7eb501a68222a21aecf45b7218588451423957d1139945c1b607e37966c13485af42efb9942ef22dec84397e","ssdeep":"192:ZsUXsVvKoSUrTpr4uT9o2gJtGcQGh/9uzmZSkennyN4AiA3Vo:ZsmsVvN3T5ZpotGHGh/9uzmZrennD2i","tlshash":"580254a13ee08768c3e2165bb73fd664f6a28dec29d6cc08e14a6904f741d87d6716b0","size":8885,"data":"","first_seen":"2024-08-29T18:08:52.12022Z","last_seen":"2024-08-29T18:08:52.12022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handbagwishesliver.com/46/13/76/461376390131460d2543a2334b5021e2.js","fqdn":"handbagwishesliver.com","domain":"handbagwishesliver.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"048a7b800ce0d72b814b44b1b1b37cc1","sha1":"66f5fb930818ff4bc811996e0e109898c2661349","sha256":"1b215e2a22ee9dd32ab669e5e21667c89f8f7987471b5e9dc4c5cf4a62db4d5f","sha512":"13203424854b6dc902b3f7b4c7b34980f24e1185a7abfdda6a607b75ca8fc79d941ec549d17df72a6ccb66d33b285d0430f7ec49a7b5b58001a50f782a39909f","ssdeep":"1536:CqHnReRQYT67sSF86f91I6Td8fLK6NaO5Oy9m4n9qA4sm7EzdJS:kSwTSz6riUS","tlshash":"b593b7487f40f17e6aabe0376b3fa10bf0251f02646ca558d157f4a42e1c36ae639dd8","size":95393,"data":"","first_seen":"2024-08-29T18:08:52.121509Z","last_seen":"2024-08-29T18:08:52.121509Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-06T02:12:00.437851Z","times_seen":248746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7fdaaab43bc993b85290c713fd2d289","sha1":"46bf3d27b2cf38b0e999d3b0a7613011181c87f9","sha256":"c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e","sha512":"e1cc8a4de54d2d1454b9b58718c7446aba03c7901e09b72a480bfa1d916c96492df25acfe1a95e8fcb15ea9ef12a48ccf799a0eedcf36640524ec089e38f2077","ssdeep":"6144:t4iiw3vnwan/i4WfvISkj4dsJDMXEuxFY9zpDkmqPgr4dAXFeUffWuRgn:t4iiw3vnhn/iyDMXEu0sTdExRgn","tlshash":"b9c42bc87285717247d370b6543f120a723a9e6d5808c16cf529e9da2df8e4da23bf78","size":589278,"data":"","first_seen":"2023-10-15T07:44:37Z","last_seen":"2026-06-05T10:59:24.562531Z","times_seen":2115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG","fqdn":"ey.dramshaplite.com","domain":"dramshaplite.com","tld":"com"},"ip":{"addr":"23.109.170.72","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8abe9eec1ba57b567ee2e31a4885617a","sha1":"45ce82d218b59eb6ee37cb901c0176a411ee495b","sha256":"a65a6eae59fdb9f2da6741be68f499882bbd7f49e303d21c9b4b6aa29f6c3c72","sha512":"985c930629dc3a5781e5ea9a8e706d730e9d90703e57527176003c5b725c000cc98ab57233bd902a104b4f208178e30760feb9b3e391feb6fd5d4fcd0cec26e8","ssdeep":"","tlshash":"44b0243430054011c477c47f7410d4017c15000c7031f307f51f40731c30d441047454","size":89,"data":"","first_seen":"2023-03-07T01:38:47Z","last_seen":"2026-06-05T08:30:32.63965Z","times_seen":546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waisheph.com/tag.min.js","fqdn":"waisheph.com","domain":"waisheph.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a074613fe2f267e156dc0e6d6cb34a","sha1":"ecb21050125cf9d9710401685995e80554f23639","sha256":"dad11c0e5ff101cec53b3bea022482e746f889b15c581dda7c0e50d28f6d3a81","sha512":"0a8c254dcec3b17bf7b596e0d8b1c30853131a6c55638dfe427700a17e99a3bc39cf79348a6490d6a90f4e2a7e3f3539949291eb96a5e33b2447c85ca7bd40f1","ssdeep":"1536:8fWhVdaEyE9V7n4rsI1yJQ1HRLg6BkEja2dGHW4IuNB:Y8daUfb8sISkxLjBNja2E24TL","tlshash":"2e63e69ffea5702243da91210177c81b7beabd00145e9a76f026bf652c34408e767fe9","size":69456,"data":"","first_seen":"2024-08-23T14:20:35Z","last_seen":"2024-08-29T18:08:52.069991Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2ecb2bd8a424c8e8cf507ce8bd933c2","sha1":"3cbc08ca052ea25c3b0834b9291a3ca1e9122e26","sha256":"4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099","sha512":"5c5cb01b30e7dad3dcfad17845b399768970d755c1743dce82602f9c2fb2a220f5a8148656c8593d912ae9dd576330ab66936b557a4f72e60f771de4d1066473","ssdeep":"96:2GATaPI0DPsUpUjS0kCofLMdAxRF3gb3CuxE6eVK5HtkH28ugVkkTiU:bAOPI0DkaUjJkvId3bBLp5SHfth","tlshash":"faa1d8d47002f52201e586e616fba48f27726dd66c0c007a211eebfc7dbd7ab43038a6","size":4580,"data":"","first_seen":"2023-03-09T00:26:57Z","last_seen":"2026-06-05T10:59:24.598566Z","times_seen":2113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/?ebued=1004075","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.62","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9780d1e3bb99ddf7945ac456eafad3b","sha1":"d942814cbb4aac53ae98d78b757c57de1c6dd34b","sha256":"f0b50dc10d372182a1f60e67b62a0365d2d0edcfe7bab6a33d24dadd626c1393","sha512":"cd249e7061a6c7753238f7743d1932e087febb8f890987fef337f3e153013ebaa54461a154df6f470a32f7b9109a6d8b903f00b1fd265b6865faa855f3e5acdd","ssdeep":"3072:IpmI95e44J6azbjK+55U3Hv5KNG+mTz1H63NZkUMsEB:Ip/5eHJ6oni1a3N+ww","tlshash":"24243b8dba92346983a374b540bf124eb23f4669bc084dd4b49ad4d07db4d4943bbfac","size":209758,"data":"","first_seen":"2024-08-29T18:08:52.047949Z","last_seen":"2024-08-29T18:08:52.047949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecbf27752c14b78e61ee5e47b5d14b96","sha1":"e8019b3b95f63230af7972f87ff6c78ffb78c052","sha256":"c0fb1ab3141de8b670f37b0b7c77eb82f766b8903c402b913e2bf91c401532cc","sha512":"ff4e8dace75e0786070d1ff809e66dd02ced59803848bce83c31dec1c958c0a66aa8319c19935e7889b479245b6f645dfae12dffde0e442d9c3649e7f51cbaf7","ssdeep":"","tlshash":"5d719603d581aa7b52ea30b86dcfc117297c5211c7020a60fa1a729c1fbed5f31b96ac","size":3572,"data":"","first_seen":"2024-08-29T18:08:52.123461Z","last_seen":"2024-08-29T18:08:52.123461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"troubledcontradiction.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js","fqdn":"troubledcontradiction.com","domain":"troubledcontradiction.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a76806226b6d759ac6dc50efb95ef36e","sha1":"5be20ff7aa09163e11be805cce9c75f7e6fa97d2","sha256":"e3563426249d2724151e1789e16d1eea2cca8bc13514c9173ec4a31e52590281","sha512":"ed83fee438b94192dea7b2328aca1561a03c57b2a1ce035174364d0891e019fb72590286d56a48661fc1b1ac26a3f4e6828e0ca464252b7498ade40383c09785","ssdeep":"768:m8niidBiiwniRz5MuDhH9OUZn1SZkuilvO14cYT520kd:m7iFRz5MmhHtFETm21y+d","tlshash":"4303b5843f80a46d17979b7f772ba5c4e23a199f3901480bd304fd807696627fee6a31","size":39560,"data":"","first_seen":"2024-08-23T14:20:36Z","last_seen":"2024-08-29T18:08:52.05259Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/get/1999414?zoneid=1999414\u0026jp=_clitep5t710x1wroy4dbd1\u0026nojs=0\u0026abvar=535\u0026febuild=76e65645779d627ff15e88d10ce1c883411be21d\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3\u0026afid=7431360695235584\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026im=1\u0026cs=5\u0026uf=0","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"abee98a3b8c080428759570601705265","sha1":"6323cb3ff5a5615c4dd72e26847c9d0e6ffc874e","sha256":"b49c7c87cf8a8d416bff8b5d0fa1bc2996069a4bb1ab5d7ff000d21133157b98","sha512":"aa5967e3e98122ea2753719509318e0be50645390aa3e4b1b6cda6a017cb27b4f7d23b93a57ec2292623e1a9f88cbfcce50975c5d788f11bad695accc7754327","ssdeep":"","tlshash":"c1613fe9948178fa5a5acc7930cba93e2c2526a08787347ef5753f1f6c0b8463430f64","size":3001,"data":"","first_seen":"2024-08-29T18:08:52.124853Z","last_seen":"2024-08-29T18:08:52.124853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.co/js/embed3.js","fqdn":"static.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59698656a40921f7585e25a5bb347955","sha1":"75de624e80155463ff8bb09090b712098eb74dd6","sha256":"69e11aff34d69dbde839afd8e63b2a65e2cdf15c140f66fa55c477eeb6b33a34","sha512":"da0ee57e16f28bea2b354e0a71f148f6d614ec4aaa26f046f0f8e2605d1de1c293978de542c1524f2e61d74ab33057e4b06872a95e8a6c895c86b0446bb912d1","ssdeep":"1536:1Swx/jSB9d9mNcnaz/oj1jxtFzkYZo2nopAMiu4aMVn3rRRk7U5oAAT5Smka7azH:Iwxo9mNcnaqNNSAMi3E+G7gp","tlshash":"44b32bc872d2b0a257e37079103f610bf23a5d69b80d8458b159d9e97cf8d8a8237f79","size":112790,"data":"","first_seen":"2024-02-04T21:01:01Z","last_seen":"2024-11-23T09:20:45.225924Z","times_seen":661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abe0086d1b796dac213b9c594fff7c4","sha1":"87858cfa281e3876c485db53a84dce6fd057afe2","sha256":"ff7534cb96a552459763f803e4090a596fb8c959f63d71ec07d40c307415a2a2","sha512":"5a1bc492972f6a62f8ef6cddcbf88be23e4cbdf7cf22bb11febce53d4ed4de59b916889c58d544b814406c4d0cdae5f8101be72ce964fe489ffaee12e86a398a","ssdeep":"768:oiGPrfnn5xQqLoYpWIDcPN7cwu6wvW7eiNWD4cDlWcL41UMt:Aj5lLoYZycwu6wQZhcDlWcLsUy","tlshash":"62432f1c7c9260481952e3baa12b31d56a257200d86e4cf2b818d3d7de752df8da3fde","size":58916,"data":"","first_seen":"2024-01-27T02:26:54Z","last_seen":"2025-02-27T04:55:48.93157Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recordedthereby.com/sfp.js","fqdn":"recordedthereby.com","domain":"recordedthereby.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e3e44049654b6e244c1777e68ffb8e7","sha1":"8f2a8298666d607afd92a0baa362ef4dc9ccd039","sha256":"4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b","sha512":"8d91a9d1fdeb367e40ac91122f0d0d82d9f63a3f62d6c9b5befd4889e9e4c315e7dc997ceb99348ab22aac93831e90b27c0d1b4c63a217e9357e2c6f3fdcf55d","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRd:nPncLBSUBULGVTfGpucE5fon","tlshash":"2d8395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85378,"data":"","first_seen":"2024-05-17T16:43:22Z","last_seen":"2025-01-21T11:22:09.699256Z","times_seen":13574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c60e4585220c73ae2f761532540e858","sha1":"bdcd78dfb56c61cd4a6aa5675c46d7040560527f","sha256":"c1813170711e7a6e03342ecb794b0275209d011c75ed485d3f8d90bce45a285f","sha512":"486c9661dce1641b6649104ff71bdaf4538a768085777aed97c39099a2c57aed9522b8b2cc2d11e1cc8d9eac44d343a3333092e3d1c36ce93c53f7e277186ba6","ssdeep":"","tlshash":"60f0237aa9301070001b402ef677cb1c7d7310291a318880423caa99ad75f6f9024ff6","size":444,"data":"","first_seen":"2024-01-23T14:06:14Z","last_seen":"2025-02-27T04:55:48.945787Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"daaa4c6a27830b863e51dd7048bd8b69","sha1":"9d40866ba41c85ea9e6d92192ffe6cbedf16a743","sha256":"4f62422209a1a871ee2b75dabbee4beddf7651046f8de20a3d29ac9109eeb224","sha512":"1ca5debd9ca0d2a1c2dc8a0ecd563ed19d578a1513e4dca06f59f4b4f70049b251d3aae0533b9ee8254c200c35c43517d7496788941480ee09317dc03121749e","ssdeep":"","tlshash":"202179262a0cf3f15b6af96fe23314e4ed3310a88017a36a772c094f4e9433556f66a4","size":1289,"data":"","first_seen":"2024-04-25T01:55:03Z","last_seen":"2024-09-19T19:41:11.223948Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"0f2156c870caf45442179b3827bf249b71baf655d09e80a4c3c6d6d43f788660e52eb9","size":1300,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-06-06T01:29:41.427993Z","times_seen":21157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"df0e45537ad0340329766ba3299ab29d","sha1":"2af9444626a1dc640c8ff7cba6523bb6e178fbc8","sha256":"1c56bd8ebc144a2275ec6794679312f9faa14d7dc6cebafcff1b5bd2b82e8f24","sha512":"9020bdea00e5b2b32748491ee0666b2ded615bb900d256339f638e898dc90154db06d7f3c824d9da9ba942951387ffef0d9a7235b88a749782ce6692c535c5d6","ssdeep":"768:ioSzd6fWZc8uvOo1f+XgI9FkAH+2teY63MSzQiFLxyBKHanpv9BA64rm0VGwKbr4:Hl8chX4kAV4Y6c0Han59Bx4ywKP4","tlshash":"4c93b899f183649542d3d1be003b324e9ca8dc10e58a8dd99b63d7c29d740db48f7ab7","size":91819,"data":"","first_seen":"2024-08-29T18:08:52.128251Z","last_seen":"2024-08-29T18:08:52.128251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/jquery.min.js","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-06-06T01:08:44.523186Z","times_seen":11985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2ef1c1d05960e113959af8bfe2d08b3","sha1":"be5d045b4a9a5185b7bcd205119cabbc004d3a54","sha256":"04e46cbe9e9aef603edc90c2a0be2f77f4682dbf1183bd9f8c11f7a7590e715d","sha512":"6a51a921636f226cb96d0a09d065e58a7e30b9bd9f7135e8d10da127ff67fddad476d01e032602ae2d643092f9d447be98ab5a4802f113d040e3adc1bcdb7157","ssdeep":"384:LTFcoHxz6FJcauwgod2beMjMQdWvFuV+ruhIXNZSYgn0yi8iCYY:LT+oRz6FCwV2beMPWdGhIXNZSln0t8iM","tlshash":"de425340be50744817ebab7f721b70e6e06e09693b89c98fd013f8922451537feda631","size":12457,"data":"","first_seen":"2024-05-23T22:22:40Z","last_seen":"2024-08-31T08:35:20.179908Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b87a20d278ae9dc8d98629812efbc992","sha1":"83d00f53c0473c3503abfdbdb3ef4b52a7c35cbc","sha256":"6a189b4e9d5abf76a6ad2f59821c79de2c8885c4debe50add81dc0dd31e37a83","sha512":"ce7d2e870762fc35844058bccee834abba9267acc6a1ac10f7b2c370dd4e5ec72d6af3c37a80f0610ca90422ee77a9c6f7490a2bb70e4ef75588a06de255f93f","ssdeep":"192:hkjFHmgTbwlD7h2BMVhaEsVR1sVpJF6KET6/jfyJ+gT8b:hkjAgTbwlD7h9V0EeR1eX8KETUyQyY","tlshash":"f4e118c0746625ba42f230e55d6fa6273137569cdb0d4a40b10af29c3efce4631bb9d9","size":7359,"data":"","first_seen":"2024-08-29T18:08:52.130193Z","last_seen":"2024-08-29T18:08:52.130193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7c1f62152ae3313f2c53eea0ae49156","sha1":"a09c60e462628adf7a3472641e0f16ce0820b039","sha256":"9107840acaaa0d904350b503d672fb2f647431ecc1060caf5e027db32de5fa29","sha512":"90a633b5dc0575c03f475c5cf52ce579092bb39651468b7e24d046855be9a9cd89441c4710409053650fb712db84768129b4f20d9b2eefc7963123af0cc69f84","ssdeep":"","tlshash":"49c01284e7641bf520b964c526072a41e1f617e54ba021b3520c8c0aeac3887c6541a2","size":170,"data":"","first_seen":"2024-08-29T18:08:52.13136Z","last_seen":"2024-08-29T18:08:52.13136Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/ads/ad.js","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"071c641b229d2bfadd243b8fa2a9c88d","sha1":"4048ed3ad506f9bb9052c23283912d0cfea8bcc6","sha256":"3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e","sha512":"31b7b4ae25e93eb16162f1ebe71a1fb95e11187a94b20f9d54f30241e0e3bc6acc5985c36f8c08054b76d65d426ebf65fd86ed19cb6ba700089b267ba98d0b39","ssdeep":"","tlshash":"7070008222008032800ca0008088c0088008020280a0800232008000000028300000c2","size":18,"data":"","first_seen":"2023-03-07T01:38:47Z","last_seen":"2024-11-23T09:20:45.223064Z","times_seen":1039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"86245ddb205b0d537ad1e6134780076a","sha1":"76d33d432096e340972d2ec6cac321ddf2296afe","sha256":"1c835f95475788a5d4dc8337a3cee440ea8761542ca88f033007f24b42b082f9","sha512":"066460c3100a4ba975644a2271dc6e39998258bbb43f898085bcfd4dac1d021c5a63757e50d4f2888870ffcd94923b6a959e2daebf8a22d3e00fa653df864c7e","ssdeep":"","tlshash":"44210072a10266b0fbd970bf876ff305b77324c64044b561a8860c8c7d1b81a972bdb1","size":1138,"data":"","first_seen":"2023-03-29T21:39:55Z","last_seen":"2024-10-23T23:03:36.974537Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"709330398a6b5d9b52f98b31956f0c3f","sha1":"440856e7c06b760f9393f45afd4c533e8c034521","sha256":"d2d69040741b7158e312a80d9cc5b435c77811a9590359579fa224376f4dbb71","sha512":"6e054aadf8d1aa01a40c02f6aea8e01ac522a84a7633ffb0e9873b7a474c311e97116f8f3c83a1e39caca99af6ce2efd012cdd21e4b6c1df7d9d305adafcc2ff","ssdeep":"","tlshash":"68d0a7fb2134a592bfdb91e7f85ba40ae112790de468c8c5a4f514b3153812e4251469","size":241,"data":"","first_seen":"2024-05-23T18:19:13Z","last_seen":"2024-10-22T05:58:24.112902Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"191cecc7838d2b7091ce74e7a42ceecf","sha1":"15d7e7aa2330af7f03d0ff59b0c97575e72a2f2e","sha256":"b8cf37a6c466bdf4ae8e6c0145846d96826ad4480bd35eeabf8db223204edd6e","sha512":"fd9ed4694df97008c643eee1f57a0001c5f5707341662531c35f07f6a6962cd5503b48793f64add7eed3cfa8261875b1c0ff96ce7fcfc83b70678ead655b6eca","ssdeep":"","tlshash":"9ed05efb277cf591ff5981e6b48bb80de2122609d4f894dab0e13871042403a0216854","size":240,"data":"","first_seen":"2024-05-23T18:19:13Z","last_seen":"2024-10-22T05:58:24.114409Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:19:57.712214923Z","timestamp":1724415597712,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"5C2F7DA36674CCAD93A922282C4CC5DC25FFE3E17206BE2FC0E1DFA98181FD46\"\r\nLast-Modified: Thu, 22 Aug 2024 00:55:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10940\r\nExpires: Fri, 23 Aug 2024 15:22:17 GMT\r\nDate: Fri, 23 Aug 2024 12:19:57 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"13ea5888d3245867e3b2271529ae3a07","sha1":"2ac08d083a3db9818f13427caf2afd6ffe844e19","sha256":"5c2f7da36674ccad93a922282c4cc5dc25ffe3e17206be2fc0e1dfa98181fd46","sha512":"96cbf4af3d8568c1b8bdd9bbb3e0784435a93a7d85d3f9b13791ffb641e4c2dae91ebb510e9b2c737741e8c0b534d239e4910f83b1b18f6cbb24684cd30f0a4a","ssdeep":"","tlshash":"67f075d0391579f013b808397af4d8e20d11a5d6308082eff0a440f0fcaa3e0e24420c","first_seen":"2024-08-22T05:25:49Z","last_seen":"2024-08-29T18:15:52.526597Z","times_seen":27943,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:19:57.751927436Z","timestamp":1724415597751,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"9E748E8BE620CE31ED3909B9574B05B4F49BD396482D89699218408C95294D97\"\r\nLast-Modified: Wed, 21 Aug 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7626\r\nExpires: Fri, 23 Aug 2024 14:27:03 GMT\r\nDate: Fri, 23 Aug 2024 12:19:57 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"133a8ab4e8c45f320352685e01db9625","sha1":"a24555e329796c47c106c0f55d1d8807f652b257","sha256":"9e748e8be620ce31ed3909b9574b05b4f49bd396482d89699218408c95294d97","sha512":"ee0d887eab5e46c65f13757daa51806ac307940f27844d04cae94de7537734dfbb7291756db906556c9639ec877654b6e17d8623e3ee7c7fd71ae09ae8412ac3","ssdeep":"","tlshash":"06f005420669f9b5762559071672d640dc10ee7d7c1658a658d003e2a1517e955c080d","first_seen":"2024-08-21T12:38:47Z","last_seen":"2024-08-29T18:15:52.526011Z","times_seen":14632,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:19:58.064206034Z","timestamp":1724415598064,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"21B5B0E771D125BC1D1CD5B12F7BB8567F86C7AB1FE44C531BB98E84A62BFDF0\"\r\nLast-Modified: Thu, 22 Aug 2024 09:59:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7855\r\nExpires: Fri, 23 Aug 2024 14:30:53 GMT\r\nDate: Fri, 23 Aug 2024 12:19:58 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"8541cd70139dfda2d95ed0b4e252f586","sha1":"38437f949815bd7b58655cc9dba515e53a6abee6","sha256":"21b5b0e771d125bc1d1cd5b12f7bb8567f86c7ab1fe44c531bb98e84a62bfdf0","sha512":"4611c153ea9fa8767adfc6bb27ef0897c7eb08ef730e047b7cc858cef00a7649036db9cdc506b8f57a83738fc9978b9c2dca1fe4eff106051219645db40cf458","ssdeep":"","tlshash":"4af00ef71d7cbc48e5600b2b9aedd9b8ed226bfc740012c275d505c5b4017b08b5c108","first_seen":"2024-08-22T15:46:39Z","last_seen":"2024-08-29T18:15:52.527166Z","times_seen":20171,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:19:58.282892658Z","timestamp":1724415598282,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"8D1B5DE3EAF9D4AE520C30CB01548286EEB9853665444C34BE6CAAC091AF5638\"\r\nLast-Modified: Wed, 21 Aug 2024 03:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=9090\r\nExpires: Fri, 23 Aug 2024 14:51:28 GMT\r\nDate: Fri, 23 Aug 2024 12:19:58 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fa24406b28144f03c66e0892b293241b","sha1":"64ec25a3e583dcd2ea13558272ac7badebbfc3d6","sha256":"8d1b5de3eaf9d4ae520c30cb01548286eeb9853665444c34be6caac091af5638","sha512":"bf1589b89ba37fbb2e0ab277b3ecf7b8cd46aecc152410b710503fe32fcd9143191b400de902962460a50847158f187a839dd3e273bc873e12df5e0780ea4b26","ssdeep":"","tlshash":"b5f00e06169fbe141fa446a72aa8aa2d29a0eee43d1024e339e044e260907eccbc040c","first_seen":"2024-08-21T10:09:55.663576Z","last_seen":"2024-08-29T18:15:52.527685Z","times_seen":36781,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.677Z","timestamp":1724415598677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 04:16:10 GMT","end":"Tue, 29 Oct 2024 04:16:09 GMT"},"fingerprint":{"sha1":"00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA","sha256":"72:D6:2B:56:73:25:5D:B2:70:3A:75:0F:19:F3:83:0B:91:D5:33:80:81:11:2E:DC:30:85:21:D7:91:C7:89:33"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 70929\r\nexpires: Wed, 13 Aug 2025 12:19:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XDm9tCORgp3W%2Fol656p%2FplQ4e85wf3eaPA8DZO2MZBgZX5uWp3QfQkeLq9detvy06Cv%2BZqDiMAwrWT%2F96xcb6Z6AuVLoCfZ4FUbuhCMjjneIXV3Fw2s5naltXw7nqtYGapyn%2BhI2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd47c7b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27958,"size_decoded":89476,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-06T02:12:00.437851Z","times_seen":248746,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":122,"dns":1,"connect":1,"send":0,"wait":24,"receive":2,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.680Z","timestamp":1724415598680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 04:16:10 GMT","end":"Tue, 29 Oct 2024 04:16:09 GMT"},"fingerprint":{"sha1":"00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA","sha256":"72:D6:2B:56:73:25:5D:B2:70:3A:75:0F:19:F3:83:0B:91:D5:33:80:81:11:2E:DC:30:85:21:D7:91:C7:89:33"}}},"request":{"raw":"GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 591\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-514\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 174531\r\nexpires: Wed, 13 Aug 2025 12:19:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WYtlGwq6Pg6FTP%2BV%2BDZxwElqLxrEytF4FrmToJ%2B9cPIXmtsrDg7Jig7BDze0dQtSEcfIylymeVhiacYforAyqSAAf4DAfTgi34reStq7%2F9WsuFEc5x%2Bk2ajbxAP5waq79QSOfLaD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd4bcf95684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591,"size_decoded":1300,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"0f2156c870caf45442179b3827bf249b71baf655d09e80a4c3c6d6d43f788660e52eb9","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-06-06T01:29:41.427993Z","times_seen":21157,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":158,"dns":7,"connect":1,"send":0,"wait":11,"receive":1,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.692Z","timestamp":1724415598692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 04:16:10 GMT","end":"Tue, 29 Oct 2024 04:16:09 GMT"},"fingerprint":{"sha1":"00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA","sha256":"72:D6:2B:56:73:25:5D:B2:70:3A:75:0F:19:F3:83:0B:91:D5:33:80:81:11:2E:DC:30:85:21:D7:91:C7:89:33"}}},"request":{"raw":"GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1571\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"630ad3e5-623\"\r\nlast-modified: Sun, 28 Aug 2022 02:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 68721\r\nexpires: Wed, 13 Aug 2025 12:19:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UcqagIECoK3EzrwBNa2xG2gS3Ir%2FtR6kMHZMkC15eas%2Bk3kmLYlxmKmldO%2B7Nz4xO8yZRoFetRpTTqpT8EWIJYeSQC%2FSxZLOUGYgynEd8jX0aa0Q052LCbDhQSrApLekdkhaUAf%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd4dd305684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1571,"size_decoded":4580,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4505)","md5":"f2ecb2bd8a424c8e8cf507ce8bd933c2","sha1":"3cbc08ca052ea25c3b0834b9291a3ca1e9122e26","sha256":"4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099","sha512":"5c5cb01b30e7dad3dcfad17845b399768970d755c1743dce82602f9c2fb2a220f5a8148656c8593d912ae9dd576330ab66936b557a4f72e60f771de4d1066473","ssdeep":"96:2GATaPI0DPsUpUjS0kCofLMdAxRF3gb3CuxE6eVK5HtkH28ugVkkTiU:bAOPI0DkaUjJkvId3bBLp5SHfth","tlshash":"faa1d8d47002f52201e586e616fba48f27726dd66c0c007a211eebfc7dbd7ab43038a6","first_seen":"2023-03-09T00:26:57Z","last_seen":"2026-06-05T10:59:24.598566Z","times_seen":2113,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":2,"connect":5,"send":0,"wait":11,"receive":1,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.690Z","timestamp":1724415598690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 04:16:10 GMT","end":"Tue, 29 Oct 2024 04:16:09 GMT"},"fingerprint":{"sha1":"00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA","sha256":"72:D6:2B:56:73:25:5D:B2:70:3A:75:0F:19:F3:83:0B:91:D5:33:80:81:11:2E:DC:30:85:21:D7:91:C7:89:33"}}},"request":{"raw":"GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 137405\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64bb5c88-218bd\"\r\nlast-modified: Sat, 22 Jul 2023 04:35:20 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 72662\r\nexpires: Wed, 13 Aug 2025 12:19:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NPPLAhTWYh6nBQF5w7p5OzU282R5i%2Bmv3MkyDXTKo6R0%2FT3h2g0seSuxo0We22Oipw2ApUiz4wAg3S2UVzoq0gcYNSQS4ftSwjl4dpPLWN1N8WvdyrDbQbpC3UE7tv26HVQ5oY%2Bk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd4fd565684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137405,"size_decoded":589278,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48459)","md5":"d7fdaaab43bc993b85290c713fd2d289","sha1":"46bf3d27b2cf38b0e999d3b0a7613011181c87f9","sha256":"c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e","sha512":"e1cc8a4de54d2d1454b9b58718c7446aba03c7901e09b72a480bfa1d916c96492df25acfe1a95e8fcb15ea9ef12a48ccf799a0eedcf36640524ec089e38f2077","ssdeep":"6144:t4iiw3vnwan/i4WfvISkj4dsJDMXEuxFY9zpDkmqPgr4dAXFeUffWuRgn:t4iiw3vnhn/iyDMXEu0sTdExRgn","tlshash":"b9c42bc87285717247d370b6543f120a723a9e6d5808c16cf529e9da2df8e4da23bf78","first_seen":"2023-10-15T07:44:37Z","last_seen":"2026-06-05T10:59:24.562531Z","times_seen":2115,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":184,"dns":2,"connect":6,"send":0,"wait":17,"receive":9,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/img/no_video_3.svg","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.685Z","timestamp":1724415598685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /img/no_video_3.svg HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2812\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-afc\"\r\nexpires: Sat, 21 Sep 2024 18:38:24 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 21985\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fzN1CXKoX2rJ9oqlqgK38jEUh3DTcMRrhacyLvhKlLMu9%2B4MycYDO5g3IDY72iSj3rwN99eXJqEdIGNWNZMKCpx0akm044wf0DWAjCRyZfFz20GNTu99RXggsvo2xw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd4fb73b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2812,"size_decoded":2812,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"077bfdaa49ae4877a42611b739ec4752","sha1":"a2f9e1222b7af9abc05122411ab8902efcc08ead","sha256":"70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c","sha512":"9eac1eaf362f200f037ae6c0c9d5c257bb57708de9955816c69d67689293430bdf39cdcd91522a993c48b823971cb984956e1ebe44516a323da03ebcd2cbefe3","ssdeep":"","tlshash":"c95164dcb81c45bd890aa7f85a687e61366f91cd40734c8d78bd0ee223d0eadb114a9c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-06-05T10:59:24.594609Z","times_seen":2792,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/ads/ad.js","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.683Z","timestamp":1724415598683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /ads/ad.js HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 18\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\ncf-bgj: minify\r\ncf-polished: origSize=20\r\nexpires: Fri, 22 Aug 2025 23:30:57 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nvary: User-Agent,Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 22008\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VwzF6%2F7c4oySK6wxyn4SX%2FBNSah1RhTOeNAZlCngUK2NIaHaS1wL7dHcqGAFAvR%2BU7oo3K2FepApSmGKBuYyr8hbU1Kv7Wbs4ipA%2F6XPKHlTOSr28MPKj%2BTntPl5OQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd4fb91b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18,"size_decoded":18,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"071c641b229d2bfadd243b8fa2a9c88d","sha1":"4048ed3ad506f9bb9052c23283912d0cfea8bcc6","sha256":"3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e","sha512":"31b7b4ae25e93eb16162f1ebe71a1fb95e11187a94b20f9d54f30241e0e3bc6acc5985c36f8c08054b76d65d426ebf65fd86ed19cb6ba700089b267ba98d0b39","ssdeep":"","tlshash":"7070008222008032800ca0008088c0088008020280a0800232008000000028300000c2","first_seen":"2023-03-07T01:38:47Z","last_seen":"2024-11-23T09:20:45.223064Z","times_seen":1039,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":197,"dns":43,"connect":8,"send":0,"wait":31,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.co/js/embed3.js","fqdn":"static.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.693Z","timestamp":1724415598693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /js/embed3.js HTTP/1.1\r\nHost: static.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 112790\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: minify\r\ncf-polished: origSize=112944\r\netag: \"65bf48c8-1b930\"\r\nexpires: Sat, 21 Sep 2024 18:37:46 GMT\r\nlast-modified: Sun, 04 Feb 2024 08:20:24 GMT\r\ncf-cache-status: HIT\r\nage: 22011\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7vpzpAQv2HXm%2B17nzEBBZtaj3CQCdYA7sF2S%2FRppG5fGVWu4zKz1gRjO4jSGwZWblKxquT8QWLa8FpGzLAPHdt%2B%2F8lV%2BSe2mJfnzDctGS9D5STI9ZcpHk8n5S2AYS2%2F6q0I0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd53c14b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112790,"size_decoded":112790,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65494), with no line terminators","md5":"59698656a40921f7585e25a5bb347955","sha1":"75de624e80155463ff8bb09090b712098eb74dd6","sha256":"69e11aff34d69dbde839afd8e63b2a65e2cdf15c140f66fa55c477eeb6b33a34","sha512":"da0ee57e16f28bea2b354e0a71f148f6d614ec4aaa26f046f0f8e2605d1de1c293978de542c1524f2e61d74ab33057e4b06872a95e8a6c895c86b0446bb912d1","ssdeep":"1536:1Swx/jSB9d9mNcnaz/oj1jxtFzkYZo2nopAMiu4aMVn3rRRk7U5oAAT5Smka7azH:Iwxo9mNcnaqNNSAMi3E+G7gp","tlshash":"44b32bc872d2b0a257e37079103f610bf23a5d69b80d8458b159d9e97cf8d8a8237f79","first_seen":"2024-02-04T21:01:01Z","last_seen":"2024-11-23T09:20:45.225924Z","times_seen":661,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":26,"connect":64,"send":0,"wait":12,"receive":115,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doodcdn.co/splash/tik4c7go14rs9uj4.jpg","fqdn":"img.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.688Z","timestamp":1724415598688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /splash/tik4c7go14rs9uj4.jpg HTTP/1.1\r\nHost: img.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 127130\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=129358\r\netag: \"66b47399-1f94e\"\r\nexpires: Fri, 06 Sep 2024 09:43:54 GMT\r\nlast-modified: Thu, 08 Aug 2024 07:28:25 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DSk6mNtqkUnhmEhFDTfGRTl6B1Vl0ZSFQzOEe2iQJ%2BW%2BHHixrg5EF6wvGq%2BKyk2FGm0Yew4O8qmOLT6KghkI8Sdv6PzGgRHPidh4fI%2B8gqOmP9xycPTjE9b0MBPL6Xh7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd50ba7b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127130,"size_decoded":127130,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3","md5":"fcfee7312b2556839370f7bf9b08ea5f","sha1":"fdc47925a4d4a0dd5dceba4cedd47186a08f705c","sha256":"e9091869f180754fa33fadd0636af65e280edc90634aa5c92dcf5b458a4564e4","sha512":"c8ba28a83c002382c53d50b0afb64ba691f56d309f959e8ca1c87400333952b862ecb5b61759cf17b87be55ba788bdcaf84b03220e2632dd02955c76af63841d","ssdeep":"3072:cirIwgmoO89karlt8sOFKperrW/PUnlj593I22L:ciriyqtdOFKperrW/gflItL","tlshash":"b7c3128d2b504824973ee1766a6716d7250c224d3ff8eb542bbcc5710827ec6cda62ee","first_seen":"2024-08-29T18:08:52.045724Z","last_seen":"2024-08-29T18:08:52.045724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":154,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/?ebued=1004075","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.62","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.697Z","timestamp":1724415598697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Thu, 03 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62","sha256":"41:BA:3A:6D:EE:23:CF:F9:B5:B7:FA:8C:6F:F5:D9:E5:89:D2:DD:DA:17:35:5C:E8:15:8F:DA:8E:2A:C8:5C:5E"}}},"request":{"raw":"GET /?ebued=1004075 HTTP/1.1\r\nHost: d3eub2e21dc6h0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 69429\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: -p7NaG_VPq6QT7fu8daSi92zlbWqm4MTjeD3O2OY6NIQA5UoGUY4NA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69429,"size_decoded":209758,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15945)","md5":"a9780d1e3bb99ddf7945ac456eafad3b","sha1":"d942814cbb4aac53ae98d78b757c57de1c6dd34b","sha256":"f0b50dc10d372182a1f60e67b62a0365d2d0edcfe7bab6a33d24dadd626c1393","sha512":"cd249e7061a6c7753238f7743d1932e087febb8f890987fef337f3e153013ebaa54461a154df6f470a32f7b9109a6d8b903f00b1fd265b6865faa855f3e5acdd","ssdeep":"3072:IpmI95e44J6azbjK+55U3Hv5KNG+mTz1H63NZkUMsEB:Ip/5eHJ6oni1a3N+ww","tlshash":"24243b8dba92346983a374b540bf124eb23f4669bc084dd4b49ad4d07db4d4943bbfac","first_seen":"2024-08-29T18:08:52.047949Z","last_seen":"2024-08-29T18:08:52.047949Z","times_seen":1,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":26,"connect":64,"send":0,"wait":212,"receive":21,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:19:59.20680186Z","timestamp":1724415599206,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B7212F4CA41E1AA909819F60FB5FAF187B984DD6AC44861BC5F25B0234CDC13E\"\r\nLast-Modified: Thu, 22 Aug 2024 16:54:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=17931\r\nExpires: Fri, 23 Aug 2024 17:18:50 GMT\r\nDate: Fri, 23 Aug 2024 12:19:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"bdecd9f84e2b8b5cee6c873df89e21e0","sha1":"9517a0ef0c23743ad189aa24b457dc2a2d42ba70","sha256":"b7212f4ca41e1aa909819f60fb5faf187b984dd6ac44861bc5f25b0234cdc13e","sha512":"ec575cdb03a633f43ea32d30cba2ee1a025f472e97abd1d9592206870bf5dbe8aaf5aa9d172ad894ce211c2a7d58d48ba9d8932b3829f34c88dafa01f1a31c67","ssdeep":"","tlshash":"e5f00ed18b287c2057505f3a9ecec1fa1c40a8da21aa3882805403da2c127f9958860d","first_seen":"2024-08-29T18:08:52.049796Z","last_seen":"2024-08-29T18:08:52.049796Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:19:59.274824337Z","timestamp":1724415599274,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"56885D76B4912E54D8BA85AC9F8D618AA1CE34B181FBA5E8675A5699FC7719C8\"\r\nLast-Modified: Wed, 21 Aug 2024 17:48:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=8632\r\nExpires: Fri, 23 Aug 2024 14:43:51 GMT\r\nDate: Fri, 23 Aug 2024 12:19:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"004f54596c317ca203a261ae12b053c4","sha1":"fa9f187128813d52f9234a900db52b59e8c2af70","sha256":"56885d76b4912e54d8ba85ac9f8d618aa1ce34b181fba5e8675a5699fc7719c8","sha512":"e3045794b2b723585567e5eaf4776a7d992aefccc4825a683364a39317d6d157dca9e44d2f64f126828b0ac36421ea3fc5e06603536d6a98d5675671169445ed","ssdeep":"","tlshash":"eef075c287f57df11738671234c7e52fbe02a7e6302019e0b4c4159778c33514688184","first_seen":"2024-08-29T18:08:52.050869Z","last_seen":"2024-08-29T18:08:52.050869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG","fqdn":"ey.dramshaplite.com","domain":"dramshaplite.com","tld":"com"},"ip":{"addr":"23.109.170.72","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.695Z","timestamp":1724415598695,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ey.dramshaplite.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Jul 2024 06:15:51 GMT","end":"Tue, 29 Oct 2024 06:15:50 GMT"},"fingerprint":{"sha1":"8E:78:37:5C:4A:84:BE:85:4B:73:C4:DD:71:FC:D8:D9:20:15:3F:4C","sha256":"73:75:03:04:D4:67:FF:70:92:C0:F5:93:E6:4B:65:9E:A0:13:F8:5B:8A:8B:98:9A:33:7C:87:D4:CF:9C:5A:3A"}}},"request":{"raw":"GET /rBoMTOsebwJmPbn9/MQmjG HTTP/1.1\r\nHost: ey.dramshaplite.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 23 Aug 2024 12:19:59 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://dood.li\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Sat, 24-Aug-2024 12:19:59 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sat, 24-Aug-2024 12:19:59 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, from Unix","md5":"7029066c27ac6f5ef18d660d5741979a","sha1":"46c6643f07aa7f6bfe7118de926b86defc5087c4","sha256":"59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2","sha512":"7e8e93f4a89ce7fae011403e14a1d53544c6e6f6b6010d61129dc27937806d2b03802610d7999eab33a4c36b0f9e001d9d76001b8354087634c1aa9c740c536f","ssdeep":"","tlshash":"de70000000c03c30cc00003000000000000c30000000c00300000c3000030c000c003c","first_seen":"2023-04-09T15:32:38Z","last_seen":"2025-03-02T06:10:10.559841Z","times_seen":229342,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":225,"connect":128,"send":0,"wait":24,"receive":1,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-23","alert":"Sinkholed","trigger":"dramshaplite.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"troubledcontradiction.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js","fqdn":"troubledcontradiction.com","domain":"troubledcontradiction.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.701Z","timestamp":1724415598701,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"troubledcontradiction.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Aug 2024 16:05:45 GMT","end":"Mon, 04 Nov 2024 16:05:44 GMT"},"fingerprint":{"sha1":"CD:D9:F9:CB:C6:1B:9B:25:CA:3E:F3:F4:2D:96:9A:B4:7F:C1:D2:AF","sha256":"D5:2A:56:3B:FB:C2:F8:74:3B:F4:E3:39:64:07:41:3A:BF:72:35:15:F5:41:D4:68:A6:13:7D:31:75:53:86:3E"}}},"request":{"raw":"GET /2c/03/60/2c0360ed33b0b4736859081c701f9a91.js HTTP/1.1\r\nHost: troubledcontradiction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 23 Aug 2024 12:19:59 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: troubledcontradiction.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c922e4c14b665f3355ac6e366156938a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13921,"size_decoded":39560,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39560), with no line terminators","md5":"a76806226b6d759ac6dc50efb95ef36e","sha1":"5be20ff7aa09163e11be805cce9c75f7e6fa97d2","sha256":"e3563426249d2724151e1789e16d1eea2cca8bc13514c9173ec4a31e52590281","sha512":"ed83fee438b94192dea7b2328aca1561a03c57b2a1ce035174364d0891e019fb72590286d56a48661fc1b1ac26a3f4e6828e0ca464252b7498ade40383c09785","ssdeep":"768:m8niidBiiwniRz5MuDhH9OUZn1SZkuilvO14cYT520kd:m7iFRz5MmhHtFETm21y+d","tlshash":"4303b5843f80a46d17979b7f772ba5c4e23a199f3901480bd304fd807696627fee6a31","first_seen":"2024-08-23T14:20:36Z","last_seen":"2024-08-29T18:08:52.05259Z","times_seen":3,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":359,"connect":91,"send":0,"wait":96,"receive":92,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.com/theme_2/img/loader.svg","fqdn":"i.doodcdn.com","domain":"doodcdn.com","tld":"com"},"ip":{"addr":"172.67.208.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.588Z","timestamp":1724415599588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Aug 2024 09:13:15 GMT","end":"Mon, 04 Nov 2024 09:13:14 GMT"},"fingerprint":{"sha1":"C4:B2:FF:D7:AC:99:CA:06:A1:DB:D7:A2:C2:ED:27:F4:2C:E7:FB:3F","sha256":"27:F9:24:E2:A1:B4:33:9E:6B:D7:BC:7A:A1:1B:FA:8E:F5:2A:F3:05:A0:32:0E:71:1D:E0:13:66:A0:CB:E4:B1"}}},"request":{"raw":"GET /theme_2/img/loader.svg HTTP/1.1\r\nHost: i.doodcdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://i.doodcdn.co/theme_2/img/loader.svg\r\ncache-control: max-age=3600\r\nexpires: Fri, 23 Aug 2024 13:19:59 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2GIufHmL9tysNRcFwjbeiD3FsJb5rZDscO1d6MWug7BsTldmlzYlBaLXbhWfMm6vB%2Bky97llDTXvV2k%2BWrK9hzhgf4rm%2FncdDO2%2BeWaWPoXyHcJvxLj5%2FJOGgiAGeBO5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd9ca2056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":167,"size_decoded":167,"mime_type":"image/svg+xml","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0104c301c5e02bd6148b8703d19b3a73","sha1":"7436e0b4b1f8c222c38069890b75fa2baf9ca620","sha256":"446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f","sha512":"84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf","ssdeep":"","tlshash":"c4c08cad6b523c98b8a73b3960c3a1a0e2ec803022d9042202b04a07f0cb1e78ec23d1","first_seen":"2023-04-05T06:32:17Z","last_seen":"2025-09-21T18:05:05.674757Z","times_seen":190494,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":56,"dns":31,"connect":1,"send":0,"wait":12,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/e/2acf7ajdrlaw","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-08-23T12:19:58.269Z","timestamp":1724415598269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dood.li","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jul 2024 23:34:22 GMT","end":"Thu, 24 Oct 2024 23:34:21 GMT"},"fingerprint":{"sha1":"64:42:C3:BB:53:75:85:A0:72:B7:99:72:1F:46:2A:9A:B2:BE:F1:3C","sha256":"C4:AD:5F:8B:A7:BC:38:0D:79:41:18:E1:E5:84:69:D9:FD:CE:51:58:51:2A:B2:E5:20:8D:81:5B:B2:25:13:1F"}}},"request":{"raw":"HEAD /e/2acf7ajdrlaw HTTP/1.1\r\nHost: dood.li\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/e/2acf7ajdrlaw\r\nCookie: file_id=169292344; aff=17300; ref_url=; lang=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 22 Aug 2024 12:19:59 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yhqJFDp1wFjgSIvG88YozwxaS46CH7VTQRW53hcT8QjxDqYj7CF36nfY5SyexGOhnhf6iCNlhcT1C95ERkXmu1gt0pe87nRciWabNAmQDj%2FxQxbm8LJLzrY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd9ab1b569a-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":70,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"i.doodcdn.co/fonts/avertastd-regular-webfont.woff2","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.7.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.684Z","timestamp":1724415599684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.co/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23812\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sat, 21 Sep 2024 16:09:29 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 21538\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5%2F6Ib0zr%2B%2Fu5syy0ekNz3wmF%2FXFGHHKJFYIlx%2Bpz2ZJ2M0vPgM0pAZ7dX58hNvske86emcE4kHTWBCYRNBBMy67kL6Utp8kQ9SajoVFdS7kfdXWow2xQDoMI3WFLPg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd9f883b523-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23812,"size_decoded":23812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23812, version 1.524","md5":"eb586e5a1b86dbf1c866e3ed80f9d18e","sha1":"280ee78d19c017ab9335f769595e5157d3c4a343","sha256":"714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf","sha512":"18b5a9996a6d0fd263f778b1ce4b7a84c42febf2dfcd5187bdc74192c156571823e973d6720f45536ef1048a355313169a4f1de1ebc30bdb0989065a1ff9ffea","ssdeep":"384:bdPI9PvaAAoKG+zf3bAVYGlg96u6Z+tUF7ZrzSkorNYlVFLhfkZv9wPXcqEbJtuE:bdPIdCA7+jVhvUFtrzSkMNOp9k99h7dr","tlshash":"c2b2e17ad02cde72f5b6f3a59b2486e2d136d235232333e2151b89ba826170e1d16bd0","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-06-05T19:19:03.609072Z","times_seen":4286,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doodcdn.co/splash/tik4c7go14rs9uj4.jpg","fqdn":"img.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.7.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.688Z","timestamp":1724415598688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /splash/tik4c7go14rs9uj4.jpg HTTP/1.1\r\nHost: img.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 127130\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=129358\r\netag: \"66b47399-1f94e\"\r\nexpires: Thu, 05 Sep 2024 15:58:22 GMT\r\nlast-modified: Thu, 08 Aug 2024 07:28:25 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RkRR3WXTwMmtHKKrU7nrQdfJeZA5jEWAk2pxWqCwFdJNr3oNcoZxgm8tuaDeedMFdJsW77FXfQxm4BzCdrkTfCxRp2P5kP9fzrXLMT7V9yT9%2Bxtqeuiymw8wAco6Walc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd96fe4b523-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127130,"size_decoded":127130,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3","md5":"fcfee7312b2556839370f7bf9b08ea5f","sha1":"fdc47925a4d4a0dd5dceba4cedd47186a08f705c","sha256":"e9091869f180754fa33fadd0636af65e280edc90634aa5c92dcf5b458a4564e4","sha512":"c8ba28a83c002382c53d50b0afb64ba691f56d309f959e8ca1c87400333952b862ecb5b61759cf17b87be55ba788bdcaf84b03220e2632dd02955c76af63841d","ssdeep":"3072:cirIwgmoO89karlt8sOFKperrW/PUnlj593I22L:ciriyqtdOFKperrW/gflItL","tlshash":"b7c3128d2b504824973ee1766a6716d7250c224d3ff8eb542bbcc5710827ec6cda62ee","first_seen":"2024-08-29T18:08:52.045724Z","last_seen":"2024-08-29T18:08:52.045724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":154,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:19:59.751623809Z","timestamp":1724415599751,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"E7F3D11E0509C41D91CE4BC210482AB4516B923B79B1B11D2908F072A93A05D7\"\r\nLast-Modified: Thu, 22 Aug 2024 13:41:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3832\r\nExpires: Fri, 23 Aug 2024 13:23:51 GMT\r\nDate: Fri, 23 Aug 2024 12:19:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"beb7051de6548b57927ea2ba1050bd28","sha1":"9646e880c0264f454242cbb9603d4711cc9ed323","sha256":"e7f3d11e0509c41d91ce4bc210482ab4516b923b79b1b11d2908f072a93a05d7","sha512":"e68dff58716d539b71179d91b656e24c4a8858a2fc77228d759c0145e107228efdb813f9efb0f661e94317da150820cabe94587677adb163056b23322361ff5d","ssdeep":"","tlshash":"ecf0056429556540251d6c35d2d5e5271c240cbd795119d24c1457e568283dd53e84cc","first_seen":"2024-08-23T00:05:16Z","last_seen":"2024-08-29T18:13:48.077962Z","times_seen":5,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:19:59.752286408Z","timestamp":1724415599752,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"E7F3D11E0509C41D91CE4BC210482AB4516B923B79B1B11D2908F072A93A05D7\"\r\nLast-Modified: Thu, 22 Aug 2024 13:41:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3832\r\nExpires: Fri, 23 Aug 2024 13:23:51 GMT\r\nDate: Fri, 23 Aug 2024 12:19:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"beb7051de6548b57927ea2ba1050bd28","sha1":"9646e880c0264f454242cbb9603d4711cc9ed323","sha256":"e7f3d11e0509c41d91ce4bc210482ab4516b923b79b1b11d2908f072a93a05d7","sha512":"e68dff58716d539b71179d91b656e24c4a8858a2fc77228d759c0145e107228efdb813f9efb0f661e94317da150820cabe94587677adb163056b23322361ff5d","ssdeep":"","tlshash":"ecf0056429556540251d6c35d2d5e5271c240cbd795119d24c1457e568283dd53e84cc","first_seen":"2024-08-23T00:05:16Z","last_seen":"2024-08-29T18:13:48.077962Z","times_seen":5,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waisheph.com/tag.min.js","fqdn":"waisheph.com","domain":"waisheph.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.641Z","timestamp":1724415599641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"waisheph.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Aug 2024 00:37:21 GMT","end":"Mon, 18 Nov 2024 00:37:20 GMT"},"fingerprint":{"sha1":"68:94:2B:35:6C:6A:DF:A9:03:5C:1C:8B:30:7E:DC:82:BE:43:C7:55","sha256":"57:A7:3F:AB:EB:21:B0:BE:6E:EB:41:6E:14:67:F7:A5:9D:1E:1E:AF:9E:10:77:D4:BD:0D:FA:F3:4B:5E:3B:9E"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: waisheph.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 26515\r\ncontent-encoding: br\r\nx-trace-id: 55ceb142eba8dca87777742736da9a47\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\naccept-ranges: bytes\r\nlast-modified: Fri, 23 Aug 2024 09:47:40 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26515,"size_decoded":69456,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"01a074613fe2f267e156dc0e6d6cb34a","sha1":"ecb21050125cf9d9710401685995e80554f23639","sha256":"dad11c0e5ff101cec53b3bea022482e746f889b15c581dda7c0e50d28f6d3a81","sha512":"0a8c254dcec3b17bf7b596e0d8b1c30853131a6c55638dfe427700a17e99a3bc39cf79348a6490d6a90f4e2a7e3f3539949291eb96a5e33b2447c85ca7bd40f1","ssdeep":"1536:8fWhVdaEyE9V7n4rsI1yJQ1HRLg6BkEja2dGHW4IuNB:Y8daUfb8sISkxLjBNja2E24TL","tlshash":"2e63e69ffea5702243da91210177c81b7beabd00145e9a76f026bf652c34408e767fe9","first_seen":"2024-08-23T14:20:35Z","last_seen":"2024-08-29T18:08:52.069991Z","times_seen":17,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":111,"dns":9,"connect":31,"send":0,"wait":53,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niersfohiplaceof.info/S2hxS1BkVxI4bRlaRHsDHFlBHDt6XyYTGhE8KXIyLwQFDjYnB1c/OS9VQHtgf1hGfnY7ARV2YW0bBSokPhtMenYiBhckbW0eTHp+eFxfeGZlXFc+bXpOBTsxLFVAbSA/HB12YXxaRX9hfl1IcmZ/XQ","fqdn":"niersfohiplaceof.info","domain":"niersfohiplaceof.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.661Z","timestamp":1724415599661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niersfohiplaceof.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jul 2024 04:19:01 GMT","end":"Mon, 07 Oct 2024 04:19:00 GMT"},"fingerprint":{"sha1":"49:E8:5E:E4:64:7C:4C:86:58:08:A5:5A:8E:4E:1E:D6:A6:94:B5:0C","sha256":"90:06:66:C8:69:69:EE:5B:EB:75:CE:0B:69:48:C4:FB:51:C5:FA:70:80:32:C7:7C:F0:4B:CB:36:60:FC:6C:EF"}}},"request":{"raw":"GET /S2hxS1BkVxI4bRlaRHsDHFlBHDt6XyYTGhE8KXIyLwQFDjYnB1c/OS9VQHtgf1hGfnY7ARV2YW0bBSokPhtMenYiBhckbW0eTHp+eFxfeGZlXFc+bXpOBTsxLFVAbSA/HB12YXxaRX9hfl1IcmZ/XQ HTTP/1.1\r\nHost: niersfohiplaceof.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mbL9lg3e9ke4zRvOkGaIBpU0ByelGmPkmwa7S3WZutNzUTmnvFsr50VDnPePbcLbbWUiis3PSweGKY7zDKCGeazLyQfoVMue0y4FGGwnF1hkRjO9wjRcumQMabO22HtPhAtOJ8uKgPo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0dda6b2eb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":80,"dns":36,"connect":1,"send":0,"wait":132,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anceenablesas.com/NGQ1M0ZVBlZeeVVZVxUzRggIFnRyQQd1IgcBQFF0UVYEVyUCDAUdJVgLQFcgRgtbR2haAUEWdHJUV2sMQAZbfgl8NXh6EnYPV3AQeidtZgxuPF5hH2ImBVAAUxBlcBdxB3ZlMXYmBGYOdTV8cgcFJXZwd24he0kQYTJdVwp2DFZ4ElhVYHIXDAB2WH94J00DCWBVTXoDUw9kZgBEMnJiD3cmYAcBdRN8dwdlE3JyLgAsZkQleTFNBwV3JWRwDkMcbWs/XCNkAwx9PHB9AHcITVUQWFBCYABMIHRhNXAjQkcPZSIFZBUFF0Fkd0QzbVkEfTxwfiB2IRhbInkIZ3YXBVFUYAN2AHZhH3sjZHkKZTdBch5iXXFrE3oAbQIcUjVSQA51NVJmB1w+Yms8ZjFidXdQMndbEmUDE1k1WwpFDjZSXAJpAQ1cUQ","fqdn":"anceenablesas.com","domain":"anceenablesas.com","tld":"com"},"ip":{"addr":"108.157.229.33","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.693Z","timestamp":1724415599693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anceenablesas.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 18 Jun 2024 00:00:00 GMT","end":"Thu, 17 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"87:48:18:2F:7F:90:CC:A3:D3:8C:7F:F2:DB:B8:C7:64:D8:E5:61:E8","sha256":"BF:A4:F9:14:31:66:67:FC:CB:DD:94:AC:D8:F8:54:8A:B4:CF:99:16:E3:13:7D:4D:F3:22:2D:7B:D1:B9:9E:86"}}},"request":{"raw":"GET /NGQ1M0ZVBlZeeVVZVxUzRggIFnRyQQd1IgcBQFF0UVYEVyUCDAUdJVgLQFcgRgtbR2haAUEWdHJUV2sMQAZbfgl8NXh6EnYPV3AQeidtZgxuPF5hH2ImBVAAUxBlcBdxB3ZlMXYmBGYOdTV8cgcFJXZwd24he0kQYTJdVwp2DFZ4ElhVYHIXDAB2WH94J00DCWBVTXoDUw9kZgBEMnJiD3cmYAcBdRN8dwdlE3JyLgAsZkQleTFNBwV3JWRwDkMcbWs/XCNkAwx9PHB9AHcITVUQWFBCYABMIHRhNXAjQkcPZSIFZBUFF0Fkd0QzbVkEfTxwfiB2IRhbInkIZ3YXBVFUYAN2AHZhH3sjZHkKZTdBch5iXXFrE3oAbQIcUjVSQA51NVJmB1w+Yms8ZjFidXdQMndbEmUDE1k1WwpFDjZSXAJpAQ1cUQ HTTP/1.1\r\nHost: anceenablesas.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1182\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b301fa8d72072cc0289eb055d8389e68.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: uIrZSv7kmflO74MWK29Hcy6Nvl2qIvgvokwoIgP8QXzG9CGJfXSzBw==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1182,"size_decoded":3030,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3030), with no line terminators","md5":"9130575cddb0c4e7cffb4014a8565bf0","sha1":"660d3d059f11e08767a84615d6984f9dd2d417d4","sha256":"2114a27b3b59372762c88796e26f83d753f1e485eb5a8d855eddfb214175f93e","sha512":"829f8dafdeb51d58bed6cae1335c78556a736529b45db0311c228f714d83a07f63e7e38fde537fce1a25622a77f4c8b8886b695a9e614f73974fafe1f0b76e32","ssdeep":"","tlshash":"4d51ed8d34f3a0c2c2f26065043bb59afa385a91834cdb14867d96bcbd711e96367f4c","first_seen":"2024-08-29T18:08:52.07121Z","last_seen":"2024-08-29T18:08:52.07121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":66,"dns":30,"connect":9,"send":0,"wait":115,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getrunkhomuto.info/V1BCWTU2MiE0CjZtIH9AJTx/fAcRdXAfUWQ1NzsHMmJzPVZhOHJ3Vjs/Nz1TJT8sLRs5NTZ8BxE2EGpdDh4UGF4RKhgNVy0dEAl0PzgmaV0kEhU9Qg85KhF7BBYECXM4dXAffGYJcgF9DiQBI1E1GQo2ABlhMjdWPR00OmE4GQs+RR8SETZWMTsHKHxnBi0cTyA9BDMNHjQrEGIYJyoxbAU7eg8HZioaMAQCMhE2bR48NWF+Lzx7G00NKRQ0UgYJLD1kHhEQMWw8IyMcch1jBB1zNRoWYFE2Nxc2U2dkChgHBTkRIVoGCSw6fhs4ADN3PBY3HgcVJRoOGDgWDCB8NR1zKQQzBHcodwAWcQpyPBYbDn8cMQQUABkCcnwHFQcrMVwEOHYUbzo8Cz9eFSQmPhM9Iy03RWoRLTYCYhs1HV8YChArYDo0","fqdn":"getrunkhomuto.info","domain":"getrunkhomuto.info","tld":"info"},"ip":{"addr":"108.157.229.111","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.700Z","timestamp":1724415599700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getrunkhomuto.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 01 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E","sha256":"E0:2E:8E:E2:F4:4D:47:72:B3:70:D4:85:A4:D4:78:58:C5:6D:3D:49:C0:F7:FD:EE:97:88:D5:8D:1F:B6:8D:02"}}},"request":{"raw":"GET /V1BCWTU2MiE0CjZtIH9AJTx/fAcRdXAfUWQ1NzsHMmJzPVZhOHJ3Vjs/Nz1TJT8sLRs5NTZ8BxE2EGpdDh4UGF4RKhgNVy0dEAl0PzgmaV0kEhU9Qg85KhF7BBYECXM4dXAffGYJcgF9DiQBI1E1GQo2ABlhMjdWPR00OmE4GQs+RR8SETZWMTsHKHxnBi0cTyA9BDMNHjQrEGIYJyoxbAU7eg8HZioaMAQCMhE2bR48NWF+Lzx7G00NKRQ0UgYJLD1kHhEQMWw8IyMcch1jBB1zNRoWYFE2Nxc2U2dkChgHBTkRIVoGCSw6fhs4ADN3PBY3HgcVJRoOGDgWDCB8NR1zKQQzBHcodwAWcQpyPBYbDn8cMQQUABkCcnwHFQcrMVwEOHYUbzo8Cz9eFSQmPhM9Iy03RWoRLTYCYhs1HV8YChArYDo0 HTTP/1.1\r\nHost: getrunkhomuto.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1182\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36510edbc7ba8916907c18e15b00f64c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: UwbB-sJkkzm1Fa1qpL4HHeJBkklwtT-1oFJZxQU4Em3Ab0108herFQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1182,"size_decoded":3025,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3025), with no line terminators","md5":"721275b5f5fa52d45ac37f126c95b3b0","sha1":"1e8b0dd3370bdcb58b034f402f87030b9d79530c","sha256":"64242979abb2e7441c35c16b0bb97ffc8359f57956de076b3f48a35c53459364","sha512":"1364dcbf3163037dcabe93209099efd9c48c97d5391e53dce50e604e62f287eb8c0b260a030bec159ede3689819532cb7aadb32138f33347ad83139aa0ca37b3","ssdeep":"","tlshash":"b351019d34f3a08282b27065053fb59afa284a91934ccb14863d96bcbd715ed6317f4c","first_seen":"2024-08-29T18:08:52.072568Z","last_seen":"2024-08-29T18:08:52.072568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":62,"dns":37,"connect":10,"send":0,"wait":114,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niersfohiplaceof.info/NEVZMEgbejpDdXkvG3IdXhwfcQBmLBhHAXMhNHUYdRQ9BSlDCH9EIVB4aAB4AHVuB25ELD0NeQxjKkQpQDAqDXkSLDdWJwljLw15GnV3AmYBYywNeRIxKVEvCXR/QDxAKWQBfwZxbQF9AXxgBn4H","fqdn":"niersfohiplaceof.info","domain":"niersfohiplaceof.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.701Z","timestamp":1724415599701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niersfohiplaceof.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jul 2024 04:19:01 GMT","end":"Mon, 07 Oct 2024 04:19:00 GMT"},"fingerprint":{"sha1":"49:E8:5E:E4:64:7C:4C:86:58:08:A5:5A:8E:4E:1E:D6:A6:94:B5:0C","sha256":"90:06:66:C8:69:69:EE:5B:EB:75:CE:0B:69:48:C4:FB:51:C5:FA:70:80:32:C7:7C:F0:4B:CB:36:60:FC:6C:EF"}}},"request":{"raw":"GET /NEVZMEgbejpDdXkvG3IdXhwfcQBmLBhHAXMhNHUYdRQ9BSlDCH9EIVB4aAB4AHVuB25ELD0NeQxjKkQpQDAqDXkSLDdWJwljLw15GnV3AmYBYywNeRIxKVEvCXR/QDxAKWQBfwZxbQF9AXxgBn4H HTTP/1.1\r\nHost: niersfohiplaceof.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=97sFY84VK7ulLX%2FgOKiKxWX75btwzknIQctU9kquq3mhPd2Ohhx8sovDiNgLFBFTbb8z8xSmnjfYA5%2FRhsl0VKdOy7yS32ahHl%2BEOC1dmrGCMM657ixM3OoYt3JHJhCh9YWcld6eiVI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0dda7b3fb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":50,"dns":6,"connect":5,"send":0,"wait":127,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.r2m03.amazontrust.com/","fqdn":"ocsp.r2m03.amazontrust.com","domain":"amazontrust.com","tld":"com"},"ip":{"addr":"54.230.218.11","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.003272819Z","timestamp":1724415600003,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.r2m03.amazontrust.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nContent-Length: 471\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=7200\r\nDate: Fri, 23 Aug 2024 12:19:59 GMT\r\nLast-Modified: Fri, 23 Aug 2024 11:33:04 GMT\r\nServer: ECAcc (ska/F7A3)\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P1\r\nX-Amz-Cf-Id: hRvdEbetNaMekHcVMPJ_rHkz8JaUKHnj__eL0cfHEmS1sKA_-LbztQ==\r\nAge: 2816\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":471,"mime_type":"application/octet-stream","magic":"data","md5":"1cdb99b0b82c31eca2ad5ed656cfb1c3","sha1":"cb5c4c15cc51af701166f389e15fef8a2d292231","sha256":"9d0252ea7fa4520bef8bece15bc5794d9d98c776b46270af9645ac1d56300139","sha512":"9dc2d07bad2d16f06ec80664bf0f5fc05a9a6dc1ccc4600a535a3653542f6e03e1c3df91093e099b7e7bbab992426f473ef69fef5aca5268b5d7e59b7baed201","ssdeep":"","tlshash":"12f02381a35268ca6304284e1fefed137d5064e614c212e9f16c41ec995dfa2eba3145","first_seen":"2024-08-22T19:43:37Z","last_seen":"2024-08-29T18:15:27.265265Z","times_seen":54,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/img/logo-s.png","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.017Z","timestamp":1724415600017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /img/logo-s.png HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1932\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6212\r\ncontent-disposition: inline; filename=\"logo-s.webp\"\r\netag: \"61d3187c-1844\"\r\nexpires: Sat, 21 Sep 2024 21:00:24 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 21994\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CwCplqbv6rCoxwoo7L1rOGjScMpnwGpNkLbSINPLP1Pra%2F8NY91pvRFK%2FgVchvLrLYjzIRt6lFVXodw8JXlTm6ZwisXm%2FCB5iKBSA7rL1BR91e5eoFhxNx73ZFNu3Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0ddc0d18b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1932,"size_decoded":1932,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8211fb3cc137d3e1c1e399b86476f951","sha1":"136d8ef228959aa0cee12e5ed463b6e6a4fcf720","sha256":"2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680","sha512":"66b912cd9bf3b97de33bec8bd0061df951b2adb028eb0a13fc9560e2145ed1253dde8612fcdc96efe812e8cffafceac6fb34f18820e319f30b9a434333916070","ssdeep":"","tlshash":"2f410a3a5c2ead6541467d012a1f8e18b79e550107d1dc6493b172a4a3ec2c5e0f54bf","first_seen":"2023-04-25T17:50:26Z","last_seen":"2026-05-23T16:23:14.928272Z","times_seen":868,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proftrafficcounter.com/stats","fqdn":"proftrafficcounter.com","domain":"proftrafficcounter.com","tld":"com"},"ip":{"addr":"3.123.210.174","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.840Z","timestamp":1724415599840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"proftrafficcounter.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 21 Nov 2023 00:00:00 GMT","end":"Thu, 19 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"E3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6","sha256":"66:22:F4:5A:8A:F6:B0:E3:CF:BA:D2:3D:3C:B7:D4:0B:FE:00:4D:DE:4E:A2:B5:68:D3:ED:C6:E6:D9:5B:06:12"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: proftrafficcounter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://dood.li\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d:2:1; expires=Mon, 21 Aug 2034 12:20:00 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":40,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7967e9902094ba05e6d5ce175e242880","sha1":"9d5021b9241e41d7399b67d12a96d05eaa967c1a","sha256":"dd26faf5fd901c600f529bb7c09362732038df067e6eea3c436a08339648cf35","sha512":"94d0e7945d9480474902f160d0a81a3e487eb763d26b316a612891b8cc38ec773c28ee6f6dfa655bc26ea4edae8e93a00411a106a4e84e2c71d0121896be2f81","ssdeep":"","tlshash":"529004f4000d7fc41715011c33cd71c017cd510d410115041c14d334d05cf571400d51","first_seen":"2024-08-29T18:08:52.078782Z","last_seen":"2024-08-29T18:08:52.078782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":171,"dns":30,"connect":23,"send":0,"wait":21,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.098547372Z","timestamp":1724415600098,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"A930B90BFE8389DB235828B592E53E550F0118FD8ACE5EA6CD81FFD03E511EFD\"\r\nLast-Modified: Thu, 22 Aug 2024 16:46:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19742\r\nExpires: Fri, 23 Aug 2024 17:49:02 GMT\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0cf9a34a6f57813192631a9e7449d116","sha1":"36d010d635bb01ed6e75fa85620602285ec974f1","sha256":"a930b90bfe8389db235828b592e53e550f0118fd8ace5ea6cd81ffd03e511efd","sha512":"962ca1be8d90772ad72c6990a4aad8469c71ccfc78214815d51bb6141c52c16bdfaeec5e1251a72653c856986d88f1733eba96893b301bffe482cc2a2fa4bd39","ssdeep":"","tlshash":"8cf00e700a8a6b40a9601d26eaaed53306205af4291120e2811853e1ac117e293a408c","first_seen":"2024-08-22T23:18:48Z","last_seen":"2024-08-29T18:14:08.527596Z","times_seen":10,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/solid.gif?z=1999414\u0026nojs=0\u0026abvar=535\u0026febuild=76e65645779d627ff15e88d10ce1c883411be21d\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3\u0026afid=7431360695235584\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026im=1\u0026cs=5","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.125Z","timestamp":1724415600125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 17 May 2024 16:59:31 GMT","end":"Tue, 12 Nov 2024 22:59:00 GMT"},"fingerprint":{"sha1":"30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A","sha256":"D5:FB:5B:81:F4:D0:FF:26:31:88:87:19:CA:1E:08:77:DD:FB:C0:A3:CA:82:56:DC:9A:51:42:9D:26:F4:21:53"}}},"request":{"raw":"POST /solid.gif?z=1999414\u0026nojs=0\u0026abvar=535\u0026febuild=76e65645779d627ff15e88d10ce1c883411be21d\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3\u0026afid=7431360695235584\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026im=1\u0026cs=5 HTTP/1.1\r\nHost: blurbreimbursetrombone.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 26 Sep 2025 12:20:00 GMT; Secure; SameSite=None\nUID=24082307205cbf48c2d57c4c93a53fd01d29; Path=/; Expires=Fri, 26 Sep 2025 12:20:00 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":43,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-06T00:24:49.199707Z","times_seen":22239,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recordedthereby.com/sfp.js","fqdn":"recordedthereby.com","domain":"recordedthereby.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.838Z","timestamp":1724415599838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recordedthereby.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jul 2024 15:25:15 GMT","end":"Fri, 04 Oct 2024 15:25:14 GMT"},"fingerprint":{"sha1":"A1:CB:3E:AF:CE:F5:E9:D2:26:FB:E2:D4:FE:4B:29:D2:B3:C9:AD:3B","sha256":"81:F5:99:6E:46:59:A5:C0:85:4E:0C:26:66:17:34:C4:6C:13:50:53:0C:9E:F7:CB:57:4B:5D:90:1D:45:3E:4A"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: recordedthereby.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 29418e0f3bcc9f868ca5aec8b43e4242\r\npragma: no-cache\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: BYPASS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F65S22Ph%2B0iF8FC2aur7evTuS0ZUcsMBlMcu0bJ3%2BCubmGaDUEKeH68GSTaNqtFgr9fuv4elpZcUHROSae1sOyI50eSXhI2l5gSLJIiHlbPF0vU98lfNcqmrCJS0bIpUyNYUM8UF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0ddb4c5b56bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27990,"size_decoded":85378,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"7e3e44049654b6e244c1777e68ffb8e7","sha1":"8f2a8298666d607afd92a0baa362ef4dc9ccd039","sha256":"4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b","sha512":"8d91a9d1fdeb367e40ac91122f0d0d82d9f63a3f62d6c9b5befd4889e9e4c315e7dc997ceb99348ab22aac93831e90b27c0d1b4c63a217e9357e2c6f3fdcf55d","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRd:nPncLBSUBULGVTfGpucE5fon","tlshash":"2d8395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2024-05-17T16:43:22Z","last_seen":"2025-01-21T11:22:09.699256Z","times_seen":13574,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":51,"dns":31,"connect":1,"send":0,"wait":124,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.210749229Z","timestamp":1724415600210,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"80698E8FD5496078CAF28A66F56B4D83C215AB7CE22EBA2948BE2E7E505957C2\"\r\nLast-Modified: Thu, 22 Aug 2024 21:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2751\r\nExpires: Fri, 23 Aug 2024 13:05:51 GMT\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"cf4beded5cc66b936a54a6514b3d9bc8","sha1":"a53a94acfc4c8ee1478737c46b73ffc45644b63e","sha256":"80698e8fd5496078caf28a66f56b4d83c215ab7ce22eba2948be2e7e505957c2","sha512":"311262e37aaf0237104fe32d9251928fbc0add29343b67d4be98bead35d397d1026dfc62c75bdf2eb179a82299eef7bfd1ed0a7523ddd3c3152c51b319497651","ssdeep":"","tlshash":"13f00e916eecfda00bbc4c2ae9dac0268d756cec3048b2a6024c52d638317fb844809c","first_seen":"2024-08-23T03:41:23Z","last_seen":"2024-08-29T18:12:32.96355Z","times_seen":11633,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/get/1999414?zoneid=1999414\u0026jp=_clitep5t710x1wroy4dbd1\u0026nojs=0\u0026abvar=535\u0026febuild=76e65645779d627ff15e88d10ce1c883411be21d\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3\u0026afid=7431360695235584\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026im=1\u0026cs=5\u0026uf=0","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.139Z","timestamp":1724415600139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 17 May 2024 16:59:31 GMT","end":"Tue, 12 Nov 2024 22:59:00 GMT"},"fingerprint":{"sha1":"30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A","sha256":"D5:FB:5B:81:F4:D0:FF:26:31:88:87:19:CA:1E:08:77:DD:FB:C0:A3:CA:82:56:DC:9A:51:42:9D:26:F4:21:53"}}},"request":{"raw":"GET /get/1999414?zoneid=1999414\u0026jp=_clitep5t710x1wroy4dbd1\u0026nojs=0\u0026abvar=535\u0026febuild=76e65645779d627ff15e88d10ce1c883411be21d\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3\u0026afid=7431360695235584\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026im=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: blurbreimbursetrombone.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 26 Sep 2025 12:20:00 GMT; Secure; SameSite=None\nUID=240823072067c6c085f2e243e98cefeb51e7; Path=/; Expires=Fri, 26 Sep 2025 12:20:00 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8416,"size_decoded":8416,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data, from Unix","md5":"1c3c20de9c482b305bf8fbe4d457899c","sha1":"3b2fe4525d2d4e23ab1b574a40ec5c6bb9d7ad61","sha256":"468eba36814055482231ff1534f0c2940d02527fbc4cb52fbf2c68c536c48342","sha512":"2760dd234197ac4c959b9040482339d400b471fdfe76779357b6e99aa854b59e8ccbf210f669ff85b4e58327c0723448a53d9517dac25126255b777dd0be509a","ssdeep":"192:G18Guu58KKqIEXuYOQvwZJ3b4w3zaM4qHfyjxo5SfSF1xiHuT7P:G1x9KNEXYN4w3zaM4YfkoiI8u3","tlshash":"3302ae6f8e4366e1d6e11fffad8493233a541e311850fe8e02d558a323ce4a46e8977d","first_seen":"2024-08-29T18:08:52.082286Z","last_seen":"2024-08-29T18:08:52.082286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/favicon.ico","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.271Z","timestamp":1724415600271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dood.li","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jul 2024 23:34:22 GMT","end":"Thu, 24 Oct 2024 23:34:21 GMT"},"fingerprint":{"sha1":"64:42:C3:BB:53:75:85:A0:72:B7:99:72:1F:46:2A:9A:B2:BE:F1:3C","sha256":"C4:AD:5F:8B:A7:BC:38:0D:79:41:18:E1:E5:84:69:D9:FD:CE:51:58:51:2A:B2:E5:20:8D:81:5B:B2:25:13:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dood.li\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/e/2acf7ajdrlaw\r\nCookie: lang=1; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-3c2e\"\r\nexpires: Wed, 04 Sep 2024 18:34:48 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 1532712\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q%2Bm7v8u%2BpHRaIY6RB7aUz73UOAXQd037nJaxRfI270NaBdVsHpbjSi%2FAqCeAFLj38CAnlCiPvr%2Fveree6Jyr%2FBx6TpMRXq8xIrotgXx0187reK53ScEfHD0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0ddda919569a-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15406,"size_decoded":15406,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-06-05T19:19:03.604458Z","times_seen":3749,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/fR3hYNVAkFzZTbzMRPAhhd0hsBWdwXihHNSFFPFo/I1Y0XHYtCzdbIHo5N1pncjMvcToIIgpHBSocfkEqI0VoEzwmFj8IdiIWOwhhYRk8V21zXi1UbSoXIlw8Kxl9BxZyVmgQYndQIARhYksaEGJ3FDFbJT9dagUof04HA2RiSxoQYncKLhBjBkFuG2BuXW-oFNyIbM1p1dT5qBWF3SGkFYWJKaFM5NR0+WihiSh4MZmlIfkBtdg","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.62","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.321423554Z","timestamp":1724415600321,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Thu, 03 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62","sha256":"41:BA:3A:6D:EE:23:CF:F9:B5:B7:FA:8C:6F:F5:D9:E5:89:D2:DD:DA:17:35:5C:E8:15:8F:DA:8E:2A:C8:5C:5E"}}},"request":{"raw":"GET /fR3hYNVAkFzZTbzMRPAhhd0hsBWdwXihHNSFFPFo/I1Y0XHYtCzdbIHo5N1pncjMvcToIIgpHBSocfkEqI0VoEzwmFj8IdiIWOwhhYRk8V21zXi1UbSoXIlw8Kxl9BxZyVmgQYndQIARhYksaEGJ3FDFbJT9dagUof04HA2RiSxoQYncKLhBjBkFuG2BuXW-oFNyIbM1p1dT5qBWF3SGkFYWJKaFM5NR0+WihiSh4MZmlIfkBtdg HTTP/1.1\r\nHost: d3eub2e21dc6h0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getrunkhomuto.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 264\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: eqtn-lP9bw4QpCaIS6kjznbMmIn72H0PCOho4xWs4PL40R-C6SuDWg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":264,"size_decoded":308,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"ac76bdfadfe56a30e2b18eba2dcef490","sha1":"74e49858558d69ab9667719c422c67672023c541","sha256":"dd3c7f876df12441e2b23adf56d6a449c3f6397af2355f9b6af7ed4de62693fb","sha512":"a36f1ec8dcc2e521bd540389ca9c572d1264945030b6278f933acf6d378a29ef40cdec18d24fdfcc796a55b86ed8c61af738a1e1658a72613602a1460994450f","ssdeep":"","tlshash":"0fe07d981308d41050a1617e029850c04bde03af61380f28801d3b51611e306cfe1629","first_seen":"2024-08-29T18:08:52.083984Z","last_seen":"2024-08-29T18:08:52.083984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/theme_2/img/loader.svg","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.896Z","timestamp":1724415599896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /theme_2/img/loader.svg HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i.doodcdn.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sat, 21 Sep 2024 17:29:35 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 22009\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cQEQ%2FVU8TMAhgW2goKvnQ9UCYnlcInxXeiTS3I58iZ2Y2GuZlKp6YyWzqb0YWxOorHou4QIMHVMw2cFGlsShEA4zp3x9glerEhiNg1AwugGb%2BE46ml9oKa0JSOVEpw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0ddb3c08b515-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4128,"size_decoded":694,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"be00fc4a29d03016e78b28c9943e3f51","sha1":"10f2025f5aa96706cc81e050eadfcaa9bcc55af5","sha256":"eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126","sha512":"ea5b50ec59873392642e6cdd1e7fbd84137d8db13906b4e435ec04160dc5412bafdea1a5324efb2a5a08fe12e9af89f4e1c99c18f5b97c987709c55568efd75a","ssdeep":"","tlshash":"6701c0645cfb4548006c8539d3e93850396c50a3954c0194fa9c1c326f008af2c6f38e","first_seen":"2023-04-30T18:25:34Z","last_seen":"2026-06-05T22:33:12.669563Z","times_seen":2456,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.380531883Z","timestamp":1724415600380,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"27466fb380d486bf2c9a016b0f31a289","sha1":"1a26479e42c3e52b860f23792ffdb41c972a11c8","sha256":"f9064bfb1ec61afc1c394b833f3c23c215ba0496d040866e238e1896f54cdfb1","sha512":"91405a92cfb2540fd0a9a04c35ce3a961033f1dc1e6a0d86369739b87a07073d8359c772dbba3a9155f154319208c95901f9fe95ee1fd0660b4ac0a4acf4ab98","ssdeep":"","tlshash":"40f0543809a994326e03686227cde4a9300147410c047348a13a03c43d647f9d708ae4","first_seen":"2024-08-22T17:15:49.02391Z","last_seen":"2024-08-29T18:15:40.697848Z","times_seen":368,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.408712374Z","timestamp":1724415600408,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"27466fb380d486bf2c9a016b0f31a289","sha1":"1a26479e42c3e52b860f23792ffdb41c972a11c8","sha256":"f9064bfb1ec61afc1c394b833f3c23c215ba0496d040866e238e1896f54cdfb1","sha512":"91405a92cfb2540fd0a9a04c35ce3a961033f1dc1e6a0d86369739b87a07073d8359c772dbba3a9155f154319208c95901f9fe95ee1fd0660b4ac0a4acf4ab98","ssdeep":"","tlshash":"40f0543809a994326e03686227cde4a9300147410c047348a13a03c43d647f9d708ae4","first_seen":"2024-08-22T17:15:49.02391Z","last_seen":"2024-08-29T18:15:40.697848Z","times_seen":368,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.269Z","timestamp":1724415600269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:50:16 GMT","end":"Tue, 22 Oct 2024 12:50:15 GMT"},"fingerprint":{"sha1":"CF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD","sha256":"B1:53:4A:25:29:1A:E2:A9:4C:73:F9:2B:D8:A6:BA:63:2B:8E:F1:96:AE:02:C7:36:6F:14:39:58:33:D7:ED:D5"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:dxbB0n54wDlTf2Ry3ymhk8lLtl10Dg:zu3sQyr8BMjumm44; Expires=Sun, 23-Aug-2026 12:20:00 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=Ab5oB3rsr8r4i0enVNl3B-9JzYZGeF5xak8wUDZromNhOkzr03d38akmYK3gYAgVGC2m1QKQh4wM9Q\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-N6-UaO3sqmFpNybHAVEJoA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":134,"dns":0,"connect":16,"send":0,"wait":23,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/css/embed.css","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.686Z","timestamp":1724415598686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /css/embed.css HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:58 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: minify\r\ncf-polished: origSize=79890\r\netag: W/\"61d3187c-13812\"\r\nexpires: Sun, 22 Sep 2024 03:26:54 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 22009\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rtE9qeDbO3Cx3fW4kk%2BsBrneieJxKML9v%2B0M5HUVwgxP20PzbVWy0qle%2B2M4Q6OkCp5Fy6j8EXf3RiQx%2Fp%2B%2BsnaQXNj%2FZVsOatKHMDFYRoNtOB8OxgZWZERHdah0WQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd4fb6cb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":113505,"size_decoded":113505,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"a5c91b724f97f22dcbd30015e428905d","sha1":"2e17655248703d8adff91a8cee2171b382a985db","sha256":"5c23246f49386f3207b85ebf3480e39647d40542f1f626017ddfc03cda3a7f6f","sha512":"f7be3811d36b9e784bd98faf32d201d48287c18b3186a60b4a46e1263b0f8b87c984264ceb2ce0edcded489157cd6c15ae6a1a0659193bf8c620a3cc3f0256e3","ssdeep":"1536:jVjjnZkKbfYr0AzRbb5cVqo1M0s5Vezm8CyisrNnfcVVX8q807fCwkvU:FjnZtYr0AzRbb5cVqo+PtuEVJ9uU","tlshash":"4bb33b81f059cbfe127e8646eec0e726922cf562d8a258c9f2273e7c8ede147115f194","first_seen":"2024-08-29T18:08:52.086415Z","last_seen":"2024-08-29T18:08:52.086415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":188,"dns":39,"connect":8,"send":0,"wait":46,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.270Z","timestamp":1724415600270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:50:16 GMT","end":"Tue, 22 Oct 2024 12:50:15 GMT"},"fingerprint":{"sha1":"CF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD","sha256":"B1:53:4A:25:29:1A:E2:A9:4C:73:F9:2B:D8:A6:BA:63:2B:8E:F1:96:AE:02:C7:36:6F:14:39:58:33:D7:ED:D5"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:CEL7g4l1HJVLmVVc1tqTJ05pgoUI7w:3SdGQJcIBG-rMlp4; Expires=Sun, 23-Aug-2026 12:20:00 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=Ab5oB3rIvYM97AJAjc6qqSebod1p7qyAejuZhbD-eGRrf8tWKa7dKnFm-1WW_1Kf0sGiyHw42jY6LQ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-kCOqrNSlnORhSYBsvrbftQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":141,"dns":0,"connect":16,"send":0,"wait":35,"receive":2,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proftrafficcounter.com/stats","fqdn":"proftrafficcounter.com","domain":"proftrafficcounter.com","tld":"com"},"ip":{"addr":"3.123.210.174","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.840Z","timestamp":1724415599840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"proftrafficcounter.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 21 Nov 2023 00:00:00 GMT","end":"Thu, 19 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"E3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6","sha256":"66:22:F4:5A:8A:F6:B0:E3:CF:BA:D2:3D:3C:B7:D4:0B:FE:00:4D:DE:4E:A2:B5:68:D3:ED:C6:E6:D9:5B:06:12"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: proftrafficcounter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nCookie: uid_id2=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://dood.li\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":40,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7967e9902094ba05e6d5ce175e242880","sha1":"9d5021b9241e41d7399b67d12a96d05eaa967c1a","sha256":"dd26faf5fd901c600f529bb7c09362732038df067e6eea3c436a08339648cf35","sha512":"94d0e7945d9480474902f160d0a81a3e487eb763d26b316a612891b8cc38ec773c28ee6f6dfa655bc26ea4edae8e93a00411a106a4e84e2c71d0121896be2f81","ssdeep":"","tlshash":"529004f4000d7fc41715011c33cd71c017cd510d410115041c14d334d05cf571400d51","first_seen":"2024-08-29T18:08:52.078782Z","last_seen":"2024-08-29T18:08:52.078782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":171,"dns":30,"connect":23,"send":0,"wait":21,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.546625945Z","timestamp":1724415600546,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":471,"mime_type":"application/octet-stream","magic":"data","md5":"422606778f6d2e49a58db1bbf3c1151a","sha1":"b14a21b8e924a3683118ecbf7e24ea7fabdc8d3b","sha256":"b8db68a61414973a8df9bf4eada88200d0d8780f6b8990d1b1a481f53872266d","sha512":"76f73bdc1a19ea67b6d8bbab025546f71d704b27622d3cbf4c8e62098fb25ca0d699d53ee551abbd4cbca7ea9ca0281c6dacd06d4af217b80539df5997a79de4","ssdeep":"","tlshash":"97f0d4566b7db4e34c3c0d897acceb59341040c8446d1557f13654c63496af48b157f0","first_seen":"2024-08-22T17:15:46.852448Z","last_seen":"2024-08-29T18:15:43.752634Z","times_seen":1650,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handbagwishesliver.com/sbar.json?key=2c0360ed33b0b4736859081c701f9a91","fqdn":"handbagwishesliver.com","domain":"handbagwishesliver.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.400Z","timestamp":1724415600400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handbagwishesliver.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jul 2024 13:54:37 GMT","end":"Sun, 29 Sep 2024 13:54:36 GMT"},"fingerprint":{"sha1":"12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88","sha256":"D2:8E:7C:37:42:10:05:79:0E:66:E5:E2:7C:2B:36:10:73:7A:4C:CD:DF:83:45:B8:E0:4D:51:39:56:33:EC:3F"}}},"request":{"raw":"GET /sbar.json?key=2c0360ed33b0b4736859081c701f9a91 HTTP/1.1\r\nHost: handbagwishesliver.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nCustom-Referer: https://dood.li\r\nAccess-Control-Allow-Origin: https://dood.li\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: u_pl=19079684; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0b0b5b472d9144b5e30397019b793689\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8168,"size_decoded":12156,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"79d8d69097489e6c3578c4f0acccd94b","sha1":"a560242cda9dc507e279a3f16efba8dc83c0552e","sha256":"fa44ef67c7233a322ec7a6ac11b69234f77be91d83abac3e1176dfdd69ff175c","sha512":"33a5d59511dc4658949f3f9fa2c6efdb59a6426184b8b8a476c198a4d16c3406c2c0601cca117d91f1870e218d1c671ed9d4b798c12b69c24ed55db290e2be26","ssdeep":"192:9wUaPl/oBiyz16/QcXHqWxmrksSmSYpzM3wEQNs4zjJIxFLMbj5AQ7IFISlwFF:98tQBivDHfGbnpQtcb6CyIWWF","tlshash":"a6428dbb5baf3bf263a16c01c3e679484d690a1fcc8c19d6970d665c0d7291c1b1ae78","first_seen":"2024-08-29T18:08:52.08835Z","last_seen":"2024-08-29T18:08:52.08835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.683850791Z","timestamp":1724415600683,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"C50E5DC0CD820913F907BEE1CF9A9A8F616A147AE20071FA000295983CAC0D4F\"\r\nLast-Modified: Thu, 22 Aug 2024 16:46:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11699\r\nExpires: Fri, 23 Aug 2024 15:34:59 GMT\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"bae98e72a3fd029aaa4d9bcfa969c7a9","sha1":"d74a277160b4a0a4dc7ab1a40147f7f828924699","sha256":"c50e5dc0cd820913f907bee1cf9a9a8f616a147ae20071fa000295983cac0d4f","sha512":"f8257bc5289922c84cdaaa5833c0d6e983606abdcb0ac75127efa144da87d5199c879b1435657d178d2f0746261e14e41d15df3cdbdf3e3b3a4e6d22ebb562fc","ssdeep":"","tlshash":"0af0055437717924013d4c246bd3e37f1e203d7410945527d46906d7dc0637a4b54108","first_seen":"2024-08-23T03:50:22Z","last_seen":"2024-08-29T18:12:27.701615Z","times_seen":303,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.700479644Z","timestamp":1724415600700,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"ACF41305AB2920B24807A7EAC1DC7D74977233042DA663F9C2E69EBE8731B931\"\r\nLast-Modified: Thu, 22 Aug 2024 20:12:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=8152\r\nExpires: Fri, 23 Aug 2024 14:35:52 GMT\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"a66b7b3889e7d972bbec1283a77935f5","sha1":"f678350c2d43ba850aaff764fb9ec251108a2fdc","sha256":"acf41305ab2920b24807a7eac1dc7d74977233042da663f9c2e69ebe8731b931","sha512":"2926549f07c232702bb0255d99f47dec92b2cd7628e7fac10ad7d8c75537238bdcf9db91a447334e67cf917c85ccc50447733e8f234eb870e47eefda052cfac0","ssdeep":"","tlshash":"53f0054235f9fbe069e245107e61f6455c1079f53c204cd4661455d27a427fcf561d0c","first_seen":"2024-08-23T08:28:12Z","last_seen":"2024-08-29T18:10:53.567373Z","times_seen":15,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=0080c138acc54b56e2fe20eab31f0b53","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.610Z","timestamp":1724415600610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtmark.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Jul 2024 22:30:11 GMT","end":"Thu, 03 Oct 2024 22:30:10 GMT"},"fingerprint":{"sha1":"4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E","sha256":"A2:37:E8:E0:05:A8:D1:C3:09:4B:AC:D3:2B:00:D2:9A:2D:7B:EC:7C:34:AC:BC:6E:6F:C7:78:D4:EC:64:D8:7A"}}},"request":{"raw":"GET /gid.js?userId=0080c138acc54b56e2fe20eab31f0b53 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\naccess-control-allow-origin: https://dood.li\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0080c138acc54b56e2fe20eab31f0b53; expires=Sat, 23 Aug 2025 12:20:00 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":65,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cc8a203dd7cb9122b9811d877a9b94fe","sha1":"32d1359ee7e4206481461ff4c3749f0507df58b0","sha256":"3639e2cf32ed8ce39dc992b224e23b6e826ef267875ab7dbb36f4407d43b2a79","sha512":"bcdb30bc4bc94d8411887d88b9cec56f798f9ad12b9be034dfdd2c062345f8d7ebdc0a98ab8b1eb2bfc3ceb5eaa224ad52868760c865fea1685276b9412ebb74","ssdeep":"","tlshash":"75a002514d5c4dd8a1600e155ac79b8e4896518198d4a25853d6d01229875dc5945770","first_seen":"2024-08-29T18:08:52.090863Z","last_seen":"2024-08-29T18:08:52.090863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":91,"dns":2,"connect":26,"send":0,"wait":27,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:00.792861163Z","timestamp":1724415600792,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"090E91DBD98D4AEBC6015773B69C3B0658B809D0295B0CB98E46A62B31FA5670\"\r\nLast-Modified: Thu, 22 Aug 2024 16:52:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3099\r\nExpires: Fri, 23 Aug 2024 13:11:39 GMT\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b2d14a6eb8ef4572f662117f25029fa1","sha1":"e84bfd20eda255cf53ab8f8ab773d07c8000658e","sha256":"090e91dbd98d4aebc6015773b69c3b0658b809d0295b0cb98e46a62b31fa5670","sha512":"87dc202b0134b5bdf9e4c3d9ce30c1439b7cc2a01928235ce5bf20a43a8b309d6383792bd07c5496c9d416ba0b451b25f1a85eb97a407432710de98909015f00","ssdeep":"","tlshash":"5ef00e6e28627cb8ee600a0d38d5eb386878beed380084d2a47443f178117b9999c0c8","first_seen":"2024-08-23T02:44:08Z","last_seen":"2024-08-29T18:12:47.331452Z","times_seen":3,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handbagwishesliver.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSu3uzJeDAS8CBCowQUZLZ7ZrZnxgjBuK4urknMKnqT6qqa2XKqu9qq%2FpldQRYDkpMM3vTU%2B81uFk3w5%2BbFIL0BDQtCxtMesnj1quBZelwcfVD13qvvK%2Fjqe%2FXJbnZCmsjo8cobelsqRZeWG5777Lu%2Bf9Fdl3E2ckfd4L2gfdE1%2BQu9oOE9574q2FAvNT3f83zPd1elEX09WqpByOROz2%2F0vEa72fCX2xiZ%2F%2Fc2c2CpA56fkMch%2BXTxnnMeklWIo29XhB2mOnn%2BlShTNNUGOT94Ox7GuogRzcu%2BcdCPD07Z0PbB6l3oeH8mFzr%2FlxjKKXF%2BuoswPjgViTDfm%2BkMFUSMkJ9FkVcQqoKkFZi%2BAckfEIBxXLmKOLp1RZuCbv2D0hqdksW%2F%2FoQspmTx4XnE0deXlRy5G1plqdSxxahfQo4qyEGFJDtEur0AWRyCpR9D8l%2BI98RZxNHt1w6%2Fz%2BXQzYUZQvJyZoGUFWS%2FghJjUOsgq5d0kPUdZImDiB%2B7zPf9jscZ9bo9xlq8I8KAez7t9H3qe0EXGatVjpEmYzA1BjM7SMwOhnIMk%2F0Iu1nCcgc2nRLnzR3kvEQhCApLUFCCQhIUKUGRl%2Ftc2aYtb3Fls9A%2Fzc3T3ConOh3s0n2dDkRMQM0Yhpe7yQk5V9vkPPP0Iobi2G0yrxV4grdaoRe2O62gu9zzuj7reH6%2FR3s%2BrCwh7cLsydtySi58cAmJnJJH759DSA9h1SGYvACaPQValKCbJbbjb3yuNbepETRqMB2B6xJJuoh0y9lVJ%2BTJ2aw2%2FvgQgh1duv95HV%2BAmRKJKfG%2BvEcwUDcn13VB9q7rwpLvriapjOQ2ree4kdJUnPnqdbFVaMPXVuz4y5dYDdTlnbeETddpzGU8sOT2Zcm5MKvaMEF%2BWLPviPBaZjcvZybOkvVrL6%2BuRYkR1kodV6BySsinv4PJKXns4YuzL7r0yG%2BQpoLJSkTZETkNSF2BJTuwyVy%2F1QRGzTlh4qDIyolphvNDJQmUmPc0LGH%2F04fzemJofZvKctfexMAsgKY3EEclclMiVyWoGsNmZyZpYo4u%2FdqaBUK1MAmVWdgLlVGfzWyuty1Yeex2Wi2PBr1lv9OhohO2m91%2B4HNKm%2B2gGQS0hdRO%2Bz9%2FlPwdAAD%2F%2F13DcPN8BAAA","fqdn":"handbagwishesliver.com","domain":"handbagwishesliver.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.709Z","timestamp":1724415600709,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handbagwishesliver.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jul 2024 13:54:37 GMT","end":"Sun, 29 Sep 2024 13:54:36 GMT"},"fingerprint":{"sha1":"12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88","sha256":"D2:8E:7C:37:42:10:05:79:0E:66:E5:E2:7C:2B:36:10:73:7A:4C:CD:DF:83:45:B8:E0:4D:51:39:56:33:EC:3F"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSu3uzJeDAS8CBCowQUZLZ7ZrZnxgjBuK4urknMKnqT6qqa2XKqu9qq%2FpldQRYDkpMM3vTU%2B81uFk3w5%2BbFIL0BDQtCxtMesnj1quBZelwcfVD13qvvK%2Fjqe%2FXJbnZCmsjo8cobelsqRZeWG5777Lu%2Bf9Fdl3E2ckfd4L2gfdE1%2BQu9oOE9574q2FAvNT3f83zPd1elEX09WqpByOROz2%2F0vEa72fCX2xiZ%2F%2Fc2c2CpA56fkMch%2BXTxnnMeklWIo29XhB2mOnn%2BlShTNNUGOT94Ox7GuogRzcu%2BcdCPD07Z0PbB6l3oeH8mFzr%2FlxjKKXF%2BuoswPjgViTDfm%2BkMFUSMkJ9FkVcQqoKkFZi%2BAckfEIBxXLmKOLp1RZuCbv2D0hqdksW%2F%2FoQspmTx4XnE0deXlRy5G1plqdSxxahfQo4qyEGFJDtEur0AWRyCpR9D8l%2BI98RZxNHt1w6%2Fz%2BXQzYUZQvJyZoGUFWS%2FghJjUOsgq5d0kPUdZImDiB%2B7zPf9jscZ9bo9xlq8I8KAez7t9H3qe0EXGatVjpEmYzA1BjM7SMwOhnIMk%2F0Iu1nCcgc2nRLnzR3kvEQhCApLUFCCQhIUKUGRl%2Ftc2aYtb3Fls9A%2Fzc3T3ConOh3s0n2dDkRMQM0Yhpe7yQk5V9vkPPP0Iobi2G0yrxV4grdaoRe2O62gu9zzuj7reH6%2FR3s%2BrCwh7cLsydtySi58cAmJnJJH759DSA9h1SGYvACaPQValKCbJbbjb3yuNbepETRqMB2B6xJJuoh0y9lVJ%2BTJ2aw2%2FvgQgh1duv95HV%2BAmRKJKfG%2BvEcwUDcn13VB9q7rwpLvriapjOQ2ree4kdJUnPnqdbFVaMPXVuz4y5dYDdTlnbeETddpzGU8sOT2Zcm5MKvaMEF%2BWLPviPBaZjcvZybOkvVrL6%2BuRYkR1kodV6BySsinv4PJKXns4YuzL7r0yG%2BQpoLJSkTZETkNSF2BJTuwyVy%2F1QRGzTlh4qDIyolphvNDJQmUmPc0LGH%2F04fzemJofZvKctfexMAsgKY3EEclclMiVyWoGsNmZyZpYo4u%2FdqaBUK1MAmVWdgLlVGfzWyuty1Yeex2Wi2PBr1lv9OhohO2m91%2B4HNKm%2B2gGQS0hdRO%2Bz9%2FlPwdAAD%2F%2F13DcPN8BAAA HTTP/1.1\r\nHost: handbagwishesliver.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nCookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: abf4665dbd4fd551e9f77b3bd2b52b9d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7,"size_decoded":7,"mime_type":"image/gif","magic":"ASCII text, with no line terminators","md5":"132d6af1b46048b45cf86cdee7991d31","sha1":"eb7007d03d59b65bc6da7e098c4d38fc6dfb6285","sha256":"ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c","sha512":"ff7c468000b64b64a67199d0110afecead13da2dfd018e709392f39058d43155747ded8f3f8b30fbf8737851cb7839855d1c0b893da3258ab90e4af995dfef1e","ssdeep":"","tlshash":"fe4000000000000c000000000003c000000c0030330000000c00000000300030003000","first_seen":"2023-04-05T23:50:35Z","last_seen":"2026-06-06T00:16:02.696038Z","times_seen":19295,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm545lq.cloudatacdn.com/favicon.ico?i","fqdn":"dm545lq.cloudatacdn.com","domain":"cloudatacdn.com","tld":"com"},"ip":{"addr":"15.235.118.201","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{10b7da85-4144-4c41-b1bc-577ba8776d7c}?https://dood.li","date":"2024-08-23T12:20:00.306Z","timestamp":1724415600306,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudatacdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Jul 2024 00:00:00 GMT","end":"Thu, 31 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B","sha256":"53:B3:65:48:0A:CB:DB:9A:54:37:2A:BC:12:D4:42:42:63:43:2F:17:5B:BD:EE:78:95:A1:EF:BB:DB:90:BA:D5"}}},"request":{"raw":"GET /favicon.ico?i HTTP/1.1\r\nHost: dm545lq.cloudatacdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 15406\r\nConnection: keep-alive\r\nLast-Modified: Sat, 29 Feb 2020 09:26:04 GMT\r\nETag: \"3c2e-59fb38b06e300\"\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15406,"size_decoded":15406,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-06-05T19:19:03.604458Z","times_seen":3749,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":329,"dns":22,"connect":94,"send":0,"wait":187,"receive":1,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scaredframe.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2194\u0026rd=2194\u0026fd=664\u0026bv=24.8.5008\u0026tmpl=136","fqdn":"scaredframe.com","domain":"scaredframe.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.502Z","timestamp":1724415600502,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"scaredframe.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Jun 2024 14:01:46 GMT","end":"Wed, 25 Sep 2024 14:01:45 GMT"},"fingerprint":{"sha1":"B4:17:07:1E:EA:E6:2C:F5:A0:FC:FA:1C:B1:4C:C2:75:36:0B:A2:E2","sha256":"0B:EF:C8:76:28:7E:DB:63:A4:5E:06:5B:F4:24:37:32:61:AF:32:FA:A0:97:1E:FA:5D:20:E6:00:B5:CC:FA:E1"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2194\u0026rd=2194\u0026fd=664\u0026bv=24.8.5008\u0026tmpl=136 HTTP/1.1\r\nHost: scaredframe.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: scaredframe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":286,"dns":1,"connect":93,"send":0,"wait":127,"receive":1,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niersfohiplaceof.info/popunder.gif","fqdn":"niersfohiplaceof.info","domain":"niersfohiplaceof.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.950Z","timestamp":1724415600950,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niersfohiplaceof.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jul 2024 04:19:01 GMT","end":"Mon, 07 Oct 2024 04:19:00 GMT"},"fingerprint":{"sha1":"49:E8:5E:E4:64:7C:4C:86:58:08:A5:5A:8E:4E:1E:D6:A6:94:B5:0C","sha256":"90:06:66:C8:69:69:EE:5B:EB:75:CE:0B:69:48:C4:FB:51:C5:FA:70:80:32:C7:7C:F0:4B:CB:36:60:FC:6C:EF"}}},"request":{"raw":"GET /popunder.gif HTTP/1.1\r\nHost: niersfohiplaceof.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 58\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 71011\r\nlast-modified: Thu, 22 Aug 2024 16:36:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gu1bYzuhjsrWHnWaq2n2mxC3toedcQwmyCvsMfrhH0dev3H%2FUxRJGlxCgDLczuDlfn0v3AsBvlQxuv8DpCnWvR2YxZiFUb14p83qhAc8lo565mEf1Z6fZIBXciRjK0211jjK98b2K%2B4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0de1fe6a56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":58,"size_decoded":35,"mime_type":"","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-06-06T01:21:46.10462Z","times_seen":48821,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=Ab5oB3rIvYM97AJAjc6qqSebod1p7qyAejuZhbD-eGRrf8tWKa7dKnFm-1WW_1Kf0sGiyHw42jY6LQ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.084Z","timestamp":1724415601084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:32:53 GMT","end":"Tue, 22 Oct 2024 12:32:52 GMT"},"fingerprint":{"sha1":"A9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69","sha256":"06:5E:3B:66:39:0A:5D:3C:7C:E5:1F:27:34:24:42:60:64:53:B3:D9:8E:4D:4E:97:F5:B7:08:B5:9D:19:0A:0A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=Ab5oB3rIvYM97AJAjc6qqSebod1p7qyAejuZhbD-eGRrf8tWKa7dKnFm-1WW_1Kf0sGiyHw42jY6LQ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.li/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:fO5mkxDZ4Nng-l9Aj-TJUg6UyrPmzQ:xQRh6YIwpH3TvdsH;Path=/;Expires=Sun, 23-Aug-2026 12:20:01 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3p88E2_iHvKh4VhljxX4AJk4fz5biEZSvxdWTED5LRQjgdYTxwa2zTqNpT2it7ykkcwkqi4\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1993648408%3A1724415601107533\u0026ddm=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-9vMFh8JArsgYU6E8qaBDBg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 423\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":423,"size_decoded":559,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (393)","md5":"62a9e39d470b598ba73cdfd36127f2ce","sha1":"d8d93da2fb49b71d6d3e6ba13ddbe9f98a1990a7","sha256":"818b47a92b1eaa5864829f0caf3224f698d1a8f23ac92c3f1adc60a654833c2a","sha512":"a0f6107460458005958e67ea51c03d5067e1e81326e64407700b717b97607c4c1370d588bf1b2717d6e2231e49009d98b71bec7fb98e5223573b4512af47a8ac","ssdeep":"","tlshash":"d4f0c0ee4e4e04de059338f5641c749c50246d7d7acba8b871f5e70916e493711463f6","first_seen":"2024-08-29T18:08:52.094234Z","last_seen":"2024-08-29T18:08:52.094234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=Ab5oB3rsr8r4i0enVNl3B-9JzYZGeF5xak8wUDZromNhOkzr03d38akmYK3gYAgVGC2m1QKQh4wM9Q","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.077Z","timestamp":1724415601077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:32:53 GMT","end":"Tue, 22 Oct 2024 12:32:52 GMT"},"fingerprint":{"sha1":"A9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69","sha256":"06:5E:3B:66:39:0A:5D:3C:7C:E5:1F:27:34:24:42:60:64:53:B3:D9:8E:4D:4E:97:F5:B7:08:B5:9D:19:0A:0A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=Ab5oB3rsr8r4i0enVNl3B-9JzYZGeF5xak8wUDZromNhOkzr03d38akmYK3gYAgVGC2m1QKQh4wM9Q HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.li/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:_Rzezd3TnKohD9iY8mkMjovY9Hkb7A:yxyICjPUkzEi3E1z;Path=/;Expires=Sun, 23-Aug-2026 12:20:01 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3pXAX5W-pYAxPDOa_m00w-wjaQ-RKs_NC69xMzMHqYelLl_cAO_YaAkA2ffoqunhCwgwbvK\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-769790794%3A1724415601108420\u0026ddm=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: script-src 'nonce-VS7haJhBgWmN1dHUjRUzvQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 418\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":418,"size_decoded":554,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (388)","md5":"5206207b68012ac81c1148310cc752ea","sha1":"432f945625bd396d7c7bd9c01a628762984660e6","sha256":"16d793764fdd1d51db19230ff61526124c362cda616fadf704c7e9d338cf4f50","sha512":"1922433e72cb57462f7bbae757093525b865e95a6946e3c97851511d2ee30295295532b7834054c907a7e73ed0c1962b74b970fa8cf9373e4df8df1d552049df","ssdeep":"","tlshash":"13f0c0bb1e8e14e9555329f67024b0dc1438281c39dbb5bca1f2670542d1c2b50463f6","first_seen":"2024-08-29T18:08:52.095402Z","last_seen":"2024-08-29T18:08:52.095402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waisheph.com/?rb=au4nPvVaQhF6Fo4nzQNRZc_MLbifEOaXSbCFEU4pzMWRtgvFCbYU6oJG-9nps_LM4EKpmNQn7FDelemyd881Dpy_TnmM_yM_hi7poTGQ6bhACKLkYxA1z7JcPigVthSCRsC0A5Og_aBPT-ruvw2M1LwpMoot4Vz3pPVmvXPg1zdbcgXw3tQT4SCRGm9mfCOb7Fm-8Qaejbwzd-ZWAp3JUR5cuqyzoah5FsH44YgKA-wT-KxVIyZUsadf3JsDt_X92BZJPHN1imE%3D\u0026request_ab2=0\u0026zoneid=6936539\u0026js_build=iclick-v1.903.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=1024\u0026wiw=1280\u0026ww=1280\u0026wh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=1280\u0026wfc=2\u0026pl=https%3A%2F%2Fdood.li%2Fe%2F2acf7ajdrlaw\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026wgl=\u0026js_build=iclick-v1.903.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026bs=ce5e34d5-7f1c-4501-b5b7-53cc6b95d05f\u0026wasm=1\u0026userId=0080c138acc54b56e2fe20eab31f0b53\u0026m=link","fqdn":"waisheph.com","domain":"waisheph.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.863Z","timestamp":1724415600863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"waisheph.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Aug 2024 00:37:21 GMT","end":"Mon, 18 Nov 2024 00:37:20 GMT"},"fingerprint":{"sha1":"68:94:2B:35:6C:6A:DF:A9:03:5C:1C:8B:30:7E:DC:82:BE:43:C7:55","sha256":"57:A7:3F:AB:EB:21:B0:BE:6E:EB:41:6E:14:67:F7:A5:9D:1E:1E:AF:9E:10:77:D4:BD:0D:FA:F3:4B:5E:3B:9E"}}},"request":{"raw":"GET /?rb=au4nPvVaQhF6Fo4nzQNRZc_MLbifEOaXSbCFEU4pzMWRtgvFCbYU6oJG-9nps_LM4EKpmNQn7FDelemyd881Dpy_TnmM_yM_hi7poTGQ6bhACKLkYxA1z7JcPigVthSCRsC0A5Og_aBPT-ruvw2M1LwpMoot4Vz3pPVmvXPg1zdbcgXw3tQT4SCRGm9mfCOb7Fm-8Qaejbwzd-ZWAp3JUR5cuqyzoah5FsH44YgKA-wT-KxVIyZUsadf3JsDt_X92BZJPHN1imE%3D\u0026request_ab2=0\u0026zoneid=6936539\u0026js_build=iclick-v1.903.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=1024\u0026wiw=1280\u0026ww=1280\u0026wh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=1280\u0026wfc=2\u0026pl=https%3A%2F%2Fdood.li%2Fe%2F2acf7ajdrlaw\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026wgl=\u0026js_build=iclick-v1.903.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026bs=ce5e34d5-7f1c-4501-b5b7-53cc6b95d05f\u0026wasm=1\u0026userId=0080c138acc54b56e2fe20eab31f0b53\u0026m=link HTTP/1.1\r\nHost: waisheph.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.li/\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=0080c138acc54b56e2fe20eab31f0b53; oaidts=1724415599\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncontent-type: application/json\r\nx-trace-id: 6cadc5424e9b9c5cec37a2092d87991c\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://dood.li\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=0080c138acc54b56e2fe20eab31f0b53; expires=Sat, 23 Aug 2025 12:20:00 GMT; path=/; secure; SameSite=None\noaidts=1724415600; expires=Sat, 23 Aug 2025 12:20:00 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Fri, 30 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4216,"size_decoded":4216,"mime_type":"application/json","magic":"gzip compressed data, max speed, from Unix","md5":"aa120e7b3d54168cff66a91459648c3b","sha1":"96148401cd27de33fe04a2985462c70ac135fad7","sha256":"38dcc82cfaec5911998fc0a915cd58bee6b0e75b791f4e1670d0f80e794581d6","sha512":"7f01bbbaa198c24db689e9ac1d4e39cefd31fc3258eec27572cf1f4da5b6178a6579c40bb912ff16e2de1bf37ecd5e58fe03a62f742fd3590bdf83b2ccda87e5","ssdeep":"96:l/byJ/j/CvD5hYDozpPCo0p+V51xenKBoO4XtV6bnEhMFYi/n:g/LCIDozEC+KBctwAhMFb/n","tlshash":"15916d1a9309693e635caec9f67fd2c528409cbf339199745cc5c4b66c0235f6be418c","first_seen":"2024-08-29T18:08:52.096539Z","last_seen":"2024-08-29T18:08:52.096539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/animate.css","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.116Z","timestamp":1724415601116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Aug 2024 15:14:55 GMT","end":"Sat, 09 Nov 2024 15:14:54 GMT"},"fingerprint":{"sha1":"EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46","sha256":"C1:A8:56:B5:09:AC:C6:DB:7F:C7:3B:EC:A0:87:F3:95:A4:A9:78:D9:6E:06:44:13:4C:0B:2F:66:D4:D3:E0:C5"}}},"request":{"raw":"GET /sb/ssp/interstitial/center_banner/2/css/animate.css HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\netag: W/\"65aa8501-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 3870469\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ydL22IjRQvNTEJpKyUTKge5yy27APLe6KUnSMJW5nu%2FSJahkk%2FNXiFaIk67LlDU9OcR%2BJRomW%2BAq%2F3xBxckUp%2FQ2QouZ7mTVmmRuq0X9X9W0t%2FgdWcD23rrWqbZJZUYiVq54MGR073k4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0de368720b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6169,"size_decoded":6169,"mime_type":"text/css","magic":"gzip compressed data, from Unix","md5":"2bbfa55e15e3b2ff1fd815e1f2f6ea0c","sha1":"d3805b8086dfb1733254823dccab6582740aa787","sha256":"b297c307fefc35b8b8f47a2c33354c122334853640abdf06b13564e39f4f2bcc","sha512":"27cc4d9e191ad09a86123c335b35fe05afe2b75cd82986a3ed9a933f9d3e1e444050fa5fd4478a4bcc68965bf0dee86a1660e0641a346d3d7421c2cb24a512e6","ssdeep":"96:Fw9t8AI/lDJa7zkpbYH+18uAdXGhaanG09oJDsw6ws/FTjEtMFYi/n:FwhMLa7z0Yg8ul7GlyQmjaMFb/n","tlshash":"a2d1a08a58d7bfb5dc704bd109c9eab4364b761e2851c23f2f040c9b7414bfe97a6049","first_seen":"2024-08-29T18:08:52.097782Z","last_seen":"2024-08-29T18:08:52.097782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":69,"dns":42,"connect":1,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:01.723471932Z","timestamp":1724415601723,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 23 Aug 2024 12:20:01 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"ca089ae4cb5c9c06f3de930f9163eb94","sha1":"92ef4800f0103b7fc1744be58bb8259c76d90f4f","sha256":"2d09c25b7d254e7e41f86fb76e16b788e9af16dc5b35f86c60ad0a5bfaf8dbd5","sha512":"b39b925fcf16b506218313e4cecedd3f6df3f158c559d1a15e88f4070e7f8966cb6a34188c895f43ec6b09d259b057738ee26d1fe53e14769aa724a2ecf5a7f0","ssdeep":"","tlshash":"2bf0d4d945781d555f3d1400b3ddf7b52c099075047c0ca815b684760e852bb570d734","first_seen":"2024-08-23T00:02:40Z","last_seen":"2024-08-29T18:13:49.742093Z","times_seen":2320,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudimagesb.com/si/09dc0f5611040962ae1e6d30d18b572eddfbbfb77e50aa358668c563df1f9777.png","fqdn":"cdn.cloudimagesb.com","domain":"cloudimagesb.com","tld":"com"},"ip":{"addr":"45.133.44.9","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.273Z","timestamp":1724415601273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.cloudimagesb.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jul 2024 04:00:43 GMT","end":"Fri, 18 Oct 2024 04:00:42 GMT"},"fingerprint":{"sha1":"C4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59","sha256":"B8:9D:E3:A6:24:7C:72:C4:C6:88:E4:2C:CD:07:09:34:24:6B:67:84:91:FA:72:CE:5F:D4:6B:7B:E2:00:AA:83"}}},"request":{"raw":"GET /si/09dc0f5611040962ae1e6d30d18b572eddfbbfb77e50aa358668c563df1f9777.png HTTP/1.1\r\nHost: cdn.cloudimagesb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 12710\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 01 Jul 2024 02:15:47 GMT\r\netag: \"66821153-31a6\"\r\nexpires: Sun, 25 Aug 2024 12:20:01 GMT\r\ncache-control: max-age=172800\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5859\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12710,"size_decoded":12710,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"d5660465f489bba10152eea2ffcc17f5","sha1":"ce6852bc339fc42b63d13d73d283ef497d91e97d","sha256":"18a23bd3e5aace18b4270e75746d218f55daa9859c817f73dd39f249c7260a0b","sha512":"60fa346bde479dccc8906e4ce6aeaa8065c2fa5a12a947a962a0094caaac576a8b2b83ae302980a9b1d77a8196d13b81463bfaa4204cbcb2599452f9c807d082","ssdeep":"384:9w/sHRR09zu0ExPROi4NUBwZdhRNgeeN9eXHp:C0xG3ExxjMXgeI6Hp","tlshash":"2642c09397267c81fb0a0e71a1e43a75f618ae2e9acd5e197050cac01b1e36fb75c817","first_seen":"2024-07-23T08:20:28Z","last_seen":"2024-09-19T22:51:08.155903Z","times_seen":30,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":436,"dns":0,"connect":23,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudimagesb.com/si/546bea17ef821f8ccfac98c1914b82ccc0e0fc7f994db93da6d386c51f230a0c.png","fqdn":"cdn.cloudimagesb.com","domain":"cloudimagesb.com","tld":"com"},"ip":{"addr":"45.133.44.9","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.272Z","timestamp":1724415601272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.cloudimagesb.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jul 2024 04:00:43 GMT","end":"Fri, 18 Oct 2024 04:00:42 GMT"},"fingerprint":{"sha1":"C4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59","sha256":"B8:9D:E3:A6:24:7C:72:C4:C6:88:E4:2C:CD:07:09:34:24:6B:67:84:91:FA:72:CE:5F:D4:6B:7B:E2:00:AA:83"}}},"request":{"raw":"GET /si/546bea17ef821f8ccfac98c1914b82ccc0e0fc7f994db93da6d386c51f230a0c.png HTTP/1.1\r\nHost: cdn.cloudimagesb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 56923\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 01 Jul 2024 02:15:28 GMT\r\netag: \"66821140-de5b\"\r\nexpires: Sun, 25 Aug 2024 12:20:01 GMT\r\ncache-control: max-age=172800\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5859\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56923,"size_decoded":56923,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3","md5":"97ec74b07f1204d29f60296ed592d970","sha1":"e3dde12591f6d5cd85c06b671f72a5e4eee4d61c","sha256":"cc48efe9da4e4754c2c65f77e897793279dd7287aaa2764455847f43b83dfe0b","sha512":"616ee20478860b1b6e872b47d326fce5c65c4d25e72ba5f072314d00930d1d87dcb7e131721a302d85c68718b99057bd956076e5ab31dd53548faf408ca62dcb","ssdeep":"1536:XFT/jpHD9S9h0BQvRCW7bDvZd/1DYPJkNquLEHOIzEKCo:XFF9Ah02f7vZdNOkQ91zEA","tlshash":"ca430234175d82e5f29cacb5c523c681935ccaf86dd7e78a220b29d53fd9b4794e4320","first_seen":"2024-07-23T08:20:28Z","last_seen":"2024-09-19T22:51:08.159783Z","times_seen":30,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":439,"dns":0,"connect":0,"send":0,"wait":42,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:01.844020785Z","timestamp":1724415601844,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 23 Aug 2024 12:20:01 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"ca089ae4cb5c9c06f3de930f9163eb94","sha1":"92ef4800f0103b7fc1744be58bb8259c76d90f4f","sha256":"2d09c25b7d254e7e41f86fb76e16b788e9af16dc5b35f86c60ad0a5bfaf8dbd5","sha512":"b39b925fcf16b506218313e4cecedd3f6df3f158c559d1a15e88f4070e7f8966cb6a34188c895f43ec6b09d259b057738ee26d1fe53e14769aa724a2ecf5a7f0","ssdeep":"","tlshash":"2bf0d4d945781d555f3d1400b3ddf7b52c099075047c0ca815b684760e852bb570d734","first_seen":"2024-08-23T00:02:40Z","last_seen":"2024-08-29T18:13:49.742093Z","times_seen":2320,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niersfohiplaceof.info/b3FDSW9ATiA6UjpBDTkNXiskLV4tFRokNV8kBSUINh8ZEzgoNGU9BgtMcnlfW0F0fEkfGCd0XkkCNygbGgJ+el9fQGUgAQkefnlfX0BlP1JeX3B9QVxHbX1JGkx0f1xbRnR9XlZEd3teXUZlPR8OFn54SR8FNyVSXkZxfVteRHV5XlhBcg","fqdn":"niersfohiplaceof.info","domain":"niersfohiplaceof.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.751Z","timestamp":1724415601751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niersfohiplaceof.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jul 2024 04:19:01 GMT","end":"Mon, 07 Oct 2024 04:19:00 GMT"},"fingerprint":{"sha1":"49:E8:5E:E4:64:7C:4C:86:58:08:A5:5A:8E:4E:1E:D6:A6:94:B5:0C","sha256":"90:06:66:C8:69:69:EE:5B:EB:75:CE:0B:69:48:C4:FB:51:C5:FA:70:80:32:C7:7C:F0:4B:CB:36:60:FC:6C:EF"}}},"request":{"raw":"POST /b3FDSW9ATiA6UjpBDTkNXiskLV4tFRokNV8kBSUINh8ZEzgoNGU9BgtMcnlfW0F0fEkfGCd0XkkCNygbGgJ+el9fQGUgAQkefnlfX0BlP1JeX3B9QVxHbX1JGkx0f1xbRnR9XlZEd3teXUZlPR8OFn54SR8FNyVSXkZxfVteRHV5XlhBcg HTTP/1.1\r\nHost: niersfohiplaceof.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tUwUVVle%2Fm1TotHm%2Bl8YAhP%2FSm0ukwzIJN7z%2B%2BgiTYxSf7zbeotAsZP%2Bi1%2FWkhiDseAQ9kzDl1sZwd%2FBWgI4BzzNdgwwU%2FY8WBascovlMLUFDEJL43y8G6JuYNNkYnXEwzB6FZOCZu8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0de6df7556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:02.277055613Z","timestamp":1724415602277,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B8FAB05FAD241C55319827F1646271DF81CEC4A78C1734AD4E9C1DF6F048DC95\"\r\nLast-Modified: Wed, 21 Aug 2024 06:36:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=20168\r\nExpires: Fri, 23 Aug 2024 17:56:10 GMT\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"75d64cb899c2a88ad2157b10b3e599b7","sha1":"27d9b26bd287444bb96e2917afc745b0d3fc5f4a","sha256":"b8fab05fad241c55319827f1646271df81cec4a78c1734ad4e9c1df6f048dc95","sha512":"e820855d008699bea34f399b80e5c174995bbd778bb1abce98d48fdbc66d0097d0f9da72c7ff90e6a7442d2f530fd2cbcb9c626c8f8eaa83354ebae51bc3e615","ssdeep":"","tlshash":"29f09e902738be831e194d598eb5e4331a7469ec2493e4e3a3a1dae07c49bd9e5450d8","first_seen":"2024-08-21T10:10:03.251261Z","last_seen":"2024-08-29T18:15:27.283363Z","times_seen":67,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:02.280907462Z","timestamp":1724415602280,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B8FAB05FAD241C55319827F1646271DF81CEC4A78C1734AD4E9C1DF6F048DC95\"\r\nLast-Modified: Wed, 21 Aug 2024 06:36:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=20168\r\nExpires: Fri, 23 Aug 2024 17:56:10 GMT\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"75d64cb899c2a88ad2157b10b3e599b7","sha1":"27d9b26bd287444bb96e2917afc745b0d3fc5f4a","sha256":"b8fab05fad241c55319827f1646271df81cec4a78c1734ad4e9c1df6f048dc95","sha512":"e820855d008699bea34f399b80e5c174995bbd778bb1abce98d48fdbc66d0097d0f9da72c7ff90e6a7442d2f530fd2cbcb9c626c8f8eaa83354ebae51bc3e615","ssdeep":"","tlshash":"29f09e902738be831e194d598eb5e4331a7469ec2493e4e3a3a1dae07c49bd9e5450d8","first_seen":"2024-08-21T10:10:03.251261Z","last_seen":"2024-08-29T18:15:27.283363Z","times_seen":67,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handbagwishesliver.com/pixel/sbs?c=1","fqdn":"handbagwishesliver.com","domain":"handbagwishesliver.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:02.180Z","timestamp":1724415602180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handbagwishesliver.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jul 2024 13:54:37 GMT","end":"Sun, 29 Sep 2024 13:54:36 GMT"},"fingerprint":{"sha1":"12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88","sha256":"D2:8E:7C:37:42:10:05:79:0E:66:E5:E2:7C:2B:36:10:73:7A:4C:CD:DF:83:45:B8:E0:4D:51:39:56:33:EC:3F"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: handbagwishesliver.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nCookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:02.287359777Z","timestamp":1724415602287,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"cf2494f3acbc540611cc1db5ff399bd8","sha1":"9c8d0d49436be710e0408f15cc4641c515301bcf","sha256":"b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33","sha512":"c4223a69dde8614cd92f05fb653507bd7d59f032adc99daff59a6e93b36fb5a53c99964e99e8915b4b48390b78f767680a9e045f224d03ab6e9c82e503adf745","ssdeep":"","tlshash":"87f0d41d1e7578575c0a4c0135d4d1de1d5144e7442c141d9035b5e8fb9975367497e1","first_seen":"2024-08-22T17:15:46.88611Z","last_seen":"2024-08-29T18:15:51.508284Z","times_seen":2109,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:02.294875738Z","timestamp":1724415602294,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"cf2494f3acbc540611cc1db5ff399bd8","sha1":"9c8d0d49436be710e0408f15cc4641c515301bcf","sha256":"b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33","sha512":"c4223a69dde8614cd92f05fb653507bd7d59f032adc99daff59a6e93b36fb5a53c99964e99e8915b4b48390b78f767680a9e045f224d03ab6e9c82e503adf745","ssdeep":"","tlshash":"87f0d41d1e7578575c0a4c0135d4d1de1d5144e7442c141d9035b5e8fb9975367497e1","first_seen":"2024-08-22T17:15:46.88611Z","last_seen":"2024-08-29T18:15:51.508284Z","times_seen":2109,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handbagwishesliver.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuzubkenBlwYMIg7KgIJPu%2BR9XCMYYDcbddaPoTeqvJ%2BVUd7VV%2FTOJIMEF2ZMM3vTU%2BSbZoLv4c%2FPiIpMFXQLCjqccNnj1quBZZgyOPqh679X3FXz1vfpkLzslNWT0ZPUNs6O0pkvNql959t0guFzZUHE2qAw6rfdajcsVm7%2FQbVX95yqvSt43SzU%2F8P3ADyprysrQDJamIFRypxtUu361UasGzQYG9v%2B9yzw46kHkp%2BRxKDFZvOddhOJjxNG3q9L1U5M8%2F0qUaZoai1wcvh33Y1PEiOZlaD2E8eEZG8Y9WLsLEx%2FM5MLk%2FxKZmhDvp7tg8eGZSLB8f6aTacgYTJxHkY8h9RiKjsHNDSjxgABc4MpVxNGtK8YWdPsflE7RCVn860%2BoYkIWH15EHH29otWgsml0lioTOwzCEmowhuqNkWRHSHcWoIoj8PRjKPEL8Z84jzi6%2FdrR97nqV3Jp%2B1CinFmg1BgqHEPLIajzkE2X8pCFHrLEQyROKjwIgrYvOPU7Xc7roi1ZS%2FgBbYcBDfxWBxmfqhwiTYbgeghud5HYXfTVEDb7EW6rhBMeXDoh3pu7yEWJQhIUjqCgBIUiKFKCIi8PhHY1V94S2mUsOMu1s1wvRybt7dEDk%2FZkTEDtEFaUe8kpuTC1yXvm6UX05Umlxv16y5eiXmc%2Ba7TrrU6z63cC3vaDsEu7AZwqodzC7Mk7akIufbCMRE3Io%2FcvgNEjOH0Eri6BZk%2BBFiXoVomd%2BJtAGCNcaiWNqtxEEKZEki4i3fb29Cl5cjarzT8%2BhOTHy%2Fc%2Fn8YX4LZEYku8r%2B4R9PTN0XVTkP3rpnDku6tJqiK1Q6dz3ExpKs999brcLowV66tu%2BOVLfApMyztvSZdu0FiouOfI7RUlhLRrxnJJflh370h2LXNbK5mNs2Tj2str61FipXPKxGNQNSHk09%2FB1YQ89vDF2RddeuQ3KDuGzUpE2TE5CygzBk924ZK5fmcIrJ5zWOKhyMqRrbH5oVYEWs57ykq4%2F%2FRsXo8snd6mqtxzN9GzC6DpDcRRidyWyHUJqodw2blRmtjj5V%2FrswDTCyOm7cI%2B01Z%2FNrN5um3DqZNK3RdtJkPZZrLRbISSC9ZsMp%2BHnNVFp8ORukn480fJ3wEAAP%2F%2F3RelG3wEAAA%3D","fqdn":"handbagwishesliver.com","domain":"handbagwishesliver.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:02.178Z","timestamp":1724415602178,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handbagwishesliver.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jul 2024 13:54:37 GMT","end":"Sun, 29 Sep 2024 13:54:36 GMT"},"fingerprint":{"sha1":"12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88","sha256":"D2:8E:7C:37:42:10:05:79:0E:66:E5:E2:7C:2B:36:10:73:7A:4C:CD:DF:83:45:B8:E0:4D:51:39:56:33:EC:3F"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuzubkenBlwYMIg7KgIJPu%2BR9XCMYYDcbddaPoTeqvJ%2BVUd7VV%2FTOJIMEF2ZMM3vTU%2BSbZoLv4c%2FPiIpMFXQLCjqccNnj1quBZZgyOPqh679X3FXz1vfpkLzslNWT0ZPUNs6O0pkvNql959t0guFzZUHE2qAw6rfdajcsVm7%2FQbVX95yqvSt43SzU%2F8P3ADyprysrQDJamIFRypxtUu361UasGzQYG9v%2B9yzw46kHkp%2BRxKDFZvOddhOJjxNG3q9L1U5M8%2F0qUaZoai1wcvh33Y1PEiOZlaD2E8eEZG8Y9WLsLEx%2FM5MLk%2FxKZmhDvp7tg8eGZSLB8f6aTacgYTJxHkY8h9RiKjsHNDSjxgABc4MpVxNGtK8YWdPsflE7RCVn860%2BoYkIWH15EHH29otWgsml0lioTOwzCEmowhuqNkWRHSHcWoIoj8PRjKPEL8Z84jzi6%2FdrR97nqV3Jp%2B1CinFmg1BgqHEPLIajzkE2X8pCFHrLEQyROKjwIgrYvOPU7Xc7roi1ZS%2FgBbYcBDfxWBxmfqhwiTYbgeghud5HYXfTVEDb7EW6rhBMeXDoh3pu7yEWJQhIUjqCgBIUiKFKCIi8PhHY1V94S2mUsOMu1s1wvRybt7dEDk%2FZkTEDtEFaUe8kpuTC1yXvm6UX05Umlxv16y5eiXmc%2Ba7TrrU6z63cC3vaDsEu7AZwqodzC7Mk7akIufbCMRE3Io%2FcvgNEjOH0Eri6BZk%2BBFiXoVomd%2BJtAGCNcaiWNqtxEEKZEki4i3fb29Cl5cjarzT8%2BhOTHy%2Fc%2Fn8YX4LZEYku8r%2B4R9PTN0XVTkP3rpnDku6tJqiK1Q6dz3ExpKs999brcLowV66tu%2BOVLfApMyztvSZdu0FiouOfI7RUlhLRrxnJJflh370h2LXNbK5mNs2Tj2str61FipXPKxGNQNSHk09%2FB1YQ89vDF2RddeuQ3KDuGzUpE2TE5CygzBk924ZK5fmcIrJ5zWOKhyMqRrbH5oVYEWs57ykq4%2F%2FRsXo8snd6mqtxzN9GzC6DpDcRRidyWyHUJqodw2blRmtjj5V%2FrswDTCyOm7cI%2B01Z%2FNrN5um3DqZNK3RdtJkPZZrLRbISSC9ZsMp%2BHnNVFp8ORukn480fJ3wEAAP%2F%2F3RelG3wEAAA%3D HTTP/1.1\r\nHost: handbagwishesliver.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nCookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4a6cbeb7eead0ba7117f9a71d2c9e913\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7,"size_decoded":7,"mime_type":"image/gif","magic":"ASCII text, with no line terminators","md5":"132d6af1b46048b45cf86cdee7991d31","sha1":"eb7007d03d59b65bc6da7e098c4d38fc6dfb6285","sha256":"ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c","sha512":"ff7c468000b64b64a67199d0110afecead13da2dfd018e709392f39058d43155747ded8f3f8b30fbf8737851cb7839855d1c0b893da3258ab90e4af995dfef1e","ssdeep":"","tlshash":"fe4000000000000c000000000003c000000c0030330000000c00000000300030003000","first_seen":"2023-04-05T23:50:35Z","last_seen":"2026-06-06T00:16:02.696038Z","times_seen":19295,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:02.188Z","timestamp":1724415602188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:49:30 GMT","end":"Tue, 22 Oct 2024 12:49:29 GMT"},"fingerprint":{"sha1":"F2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14","sha256":"22:1D:02:6C:BF:DD:4A:D4:72:18:13:7E:15:9C:D9:F9:D8:70:14:BE:14:0C:8A:0C:4B:F9:D6:F3:2A:56:90:6A"}}},"request":{"raw":"GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Aug 2024 06:50:54 GMT\r\nexpires: Thu, 21 Aug 2025 06:50:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 01 Aug 2024 20:41:21 GMT\r\ncontent-type: font/woff2\r\nage: 192548\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18596,"size_decoded":18596,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18596, version 1.0","md5":"c83e4437a53d7f849f9d32df3d6b68f3","sha1":"fabea5ad92ed3e2431659b02e7624df30d0c6bbc","sha256":"d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb","sha512":"c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f","ssdeep":"384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl","tlshash":"7482d12a50143642c0f6ff3b6767da72fab83036d8554cd206c9994d89e067df78b839","first_seen":"2024-08-01T01:35:45Z","last_seen":"2026-06-06T00:31:33.584199Z","times_seen":31610,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":108,"dns":44,"connect":7,"send":0,"wait":8,"receive":2,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:02.186Z","timestamp":1724415602186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:49:30 GMT","end":"Tue, 22 Oct 2024 12:49:29 GMT"},"fingerprint":{"sha1":"F2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14","sha256":"22:1D:02:6C:BF:DD:4A:D4:72:18:13:7E:15:9C:D9:F9:D8:70:14:BE:14:0C:8A:0C:4B:F9:D6:F3:2A:56:90:6A"}}},"request":{"raw":"GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18536\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 20 Aug 2024 17:36:19 GMT\r\nexpires: Wed, 20 Aug 2025 17:36:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 01 Aug 2024 20:41:24 GMT\r\ncontent-type: font/woff2\r\nage: 240223\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18536,"size_decoded":18536,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18536, version 1.0","md5":"8eff0b8045fd1959e117f85654ae7770","sha1":"227fee13ceb7c410b5c0bb8000258b6643cb6255","sha256":"89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571","sha512":"2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058","ssdeep":"384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc","tlshash":"d882dfa0f21610f7df085c39a41f9d3964274bbc613c7c437379587aaa0068d56bbb79","first_seen":"2024-08-01T01:33:28Z","last_seen":"2026-06-06T00:31:33.500724Z","times_seen":51540,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":113,"dns":46,"connect":7,"send":0,"wait":8,"receive":6,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-23T12:20:02.365499005Z","timestamp":1724415602365,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"cf2494f3acbc540611cc1db5ff399bd8","sha1":"9c8d0d49436be710e0408f15cc4641c515301bcf","sha256":"b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33","sha512":"c4223a69dde8614cd92f05fb653507bd7d59f032adc99daff59a6e93b36fb5a53c99964e99e8915b4b48390b78f767680a9e045f224d03ab6e9c82e503adf745","ssdeep":"","tlshash":"87f0d41d1e7578575c0a4c0135d4d1de1d5144e7442c141d9035b5e8fb9975367497e1","first_seen":"2024-08-22T17:15:46.88611Z","last_seen":"2024-08-29T18:15:51.508284Z","times_seen":2109,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unseenreport.com/pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d\u0026eb=978028c5053b26833423c7a069ce3bd5\u0026te=5db3a4e34790624df926db520a13f79f\u0026ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0\u0026dev=e\u0026res=14.2071\u0026b_frame=0\u0026pk=2c0360ed33b0b4736859081c701f9a91\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=12","fqdn":"unseenreport.com","domain":"unseenreport.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:02.048Z","timestamp":1724415602048,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.unseenreport.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jul 2024 14:59:20 GMT","end":"Fri, 18 Oct 2024 14:59:19 GMT"},"fingerprint":{"sha1":"D9:3D:28:C1:14:1B:2B:53:0E:E4:3E:FC:88:7A:FF:9C:45:4B:63:C7","sha256":"AF:82:47:A6:A8:50:CD:A9:93:64:E7:13:89:95:CE:FE:57:DC:DF:7B:EE:C4:75:45:3F:55:B2:EC:9C:24:16:21"}}},"request":{"raw":"GET /pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d\u0026eb=978028c5053b26833423c7a069ce3bd5\u0026te=5db3a4e34790624df926db520a13f79f\u0026ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0\u0026dev=e\u0026res=14.2071\u0026b_frame=0\u0026pk=2c0360ed33b0b4736859081c701f9a91\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=12 HTTP/1.1\r\nHost: unseenreport.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 34481247c2dfb54297fc48bed4c2f754\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":1,"mime_type":"image/gif","magic":"very short file (no magic)","md5":"93b885adfe0da089cdf634904fd59f71","sha1":"5ba93c9db0cff93f52b521d7420e43f6eda2784f","sha256":"6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d","sha512":"b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:01:45Z","last_seen":"2026-06-05T22:15:32.974142Z","times_seen":28834,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":329,"dns":4,"connect":107,"send":0,"wait":141,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-23","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unseenreport.com/pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d\u0026eb=978028c5053b26833423c7a069ce3bd5\u0026te=5db3a4e34790624df926db520a13f79f\u0026ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0\u0026dev=e\u0026res=14.2071\u0026b_frame=0\u0026pk=461376390131460d2543a2334b5021e2\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=12","fqdn":"unseenreport.com","domain":"unseenreport.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:02.050Z","timestamp":1724415602050,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.unseenreport.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jul 2024 14:59:20 GMT","end":"Fri, 18 Oct 2024 14:59:19 GMT"},"fingerprint":{"sha1":"D9:3D:28:C1:14:1B:2B:53:0E:E4:3E:FC:88:7A:FF:9C:45:4B:63:C7","sha256":"AF:82:47:A6:A8:50:CD:A9:93:64:E7:13:89:95:CE:FE:57:DC:DF:7B:EE:C4:75:45:3F:55:B2:EC:9C:24:16:21"}}},"request":{"raw":"GET /pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d\u0026eb=978028c5053b26833423c7a069ce3bd5\u0026te=5db3a4e34790624df926db520a13f79f\u0026ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0\u0026dev=e\u0026res=14.2071\u0026b_frame=0\u0026pk=461376390131460d2543a2334b5021e2\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=12 HTTP/1.1\r\nHost: unseenreport.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 23 Aug 2024 12:20:02 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 07ad743b1782c0db720128ba65838911\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":1,"mime_type":"image/gif","magic":"very short file (no magic)","md5":"93b885adfe0da089cdf634904fd59f71","sha1":"5ba93c9db0cff93f52b521d7420e43f6eda2784f","sha256":"6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d","sha512":"b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:01:45Z","last_seen":"2026-06-05T22:15:32.974142Z","times_seen":28834,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":331,"dns":2,"connect":109,"send":0,"wait":138,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-23","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"handbagwishesliver.com/46/13/76/461376390131460d2543a2334b5021e2.js","fqdn":"handbagwishesliver.com","domain":"handbagwishesliver.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.842Z","timestamp":1724415599842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handbagwishesliver.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jul 2024 13:54:37 GMT","end":"Sun, 29 Sep 2024 13:54:36 GMT"},"fingerprint":{"sha1":"12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88","sha256":"D2:8E:7C:37:42:10:05:79:0E:66:E5:E2:7C:2B:36:10:73:7A:4C:CD:DF:83:45:B8:E0:4D:51:39:56:33:EC:3F"}}},"request":{"raw":"GET /46/13/76/461376390131460d2543a2334b5021e2.js HTTP/1.1\r\nHost: handbagwishesliver.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 23 Aug 2024 12:20:00 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7fccd62cb04b26c65d3b1a710571faaf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95393,"size_decoded":95393,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":965,"timings":{"blocked":357,"dns":33,"connect":107,"send":0,"wait":124,"receive":119,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.269Z","timestamp":1724415601269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:49:45 GMT","end":"Tue, 22 Oct 2024 12:49:44 GMT"},"fingerprint":{"sha1":"C4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF","sha256":"2C:F6:BB:60:47:DE:95:1D:70:0E:DB:82:4F:8B:25:7C:53:71:AD:B7:2C:CA:F9:7E:00:57:F3:9F:F1:74:25:40"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 23 Aug 2024 12:20:01 GMT\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7004,"size_decoded":7004,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7193), with no line terminators","md5":"1b9a5aaa00577f3b515cd8bdb5902734","sha1":"ac084682592bdc2893faced3b83a36599817add0","sha256":"19507720081a42c4fcac9da0e5a874af98db546cd9f4aa9aaf271cfb442b9030","sha512":"e2a2d6eb24f117223424f1c2aa4d67b2b7c8c67d7908b7e5b9b79d5e2cb17bef156c3b6f97ba185a2b59dbdd2aa482d39314330cdf014ad1abdfb118a806bb42","ssdeep":"192:/SPiZm5IMaLKXW9W65FTEaYdRTxCx5UBTH+:/SPiZeIMcKXW9WiFTbyRTxCDUBj+","tlshash":"cae18b81581b5404ea830ee237df7a35bd0f2b2560b282369bfd5cae9dc7c22535475d","first_seen":"2024-08-02T02:00:32Z","last_seen":"2024-10-15T23:33:51.641705Z","times_seen":1074,"resource_available":false,"data":null}},"time_used":977,"timings":{"blocked":467,"dns":0,"connect":21,"send":0,"wait":34,"receive":0,"ssl":451},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.li/pass_md5/169292344-91-90-1724415598-53e4888375e4c2ea06edad6d21bb9de6/udbzx08bf817ndrxw527fhbi","fqdn":"dood.li","domain":"dood.li","tld":"li"},"ip":{"addr":"172.67.68.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.559Z","timestamp":1724415599559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dood.li","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jul 2024 23:34:22 GMT","end":"Thu, 24 Oct 2024 23:34:21 GMT"},"fingerprint":{"sha1":"64:42:C3:BB:53:75:85:A0:72:B7:99:72:1F:46:2A:9A:B2:BE:F1:3C","sha256":"C4:AD:5F:8B:A7:BC:38:0D:79:41:18:E1:E5:84:69:D9:FD:CE:51:58:51:2A:B2:E5:20:8D:81:5B:B2:25:13:1F"}}},"request":{"raw":"GET /pass_md5/169292344-91-90-1724415598-53e4888375e4c2ea06edad6d21bb9de6/udbzx08bf817ndrxw527fhbi HTTP/1.1\r\nHost: dood.li\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/e/2acf7ajdrlaw\r\nCookie: lang=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DAitsTNXXT7mH9VC9Q2oisw4j8yIiayuud1WSSkwqXdOBOQuPWhP7t6d69nxXlHzdnG0dnoH0a2sUuyhY2rPbVuD%2FOlxJbg7l5lOtVNf4tKpY8UBrSqIrOk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0dd93a88569a-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104,"size_decoded":104,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f6409390049d522b4060e86304eb9f56","sha1":"bf02389d3be3accd1a5c41df776a7e2f9767b903","sha256":"25e052d292a04c376ab9857483fc1babd4def8e9bbb5b2c60f4499a40681f351","sha512":"f2e0b5c78a82069625bf485b519d303587a2c68c31fe97ac168ecdab0ffd9679b96a04035caa41aa0927b1a95373d23c706fe1379525a24e8a837fd120fd1969","ssdeep":"","tlshash":"67b012bab53a9fc66e8048ed0920a39f04663c2c6de7928047a50f0b0187cea3605600","first_seen":"2024-08-29T18:08:52.104579Z","last_seen":"2024-08-29T18:08:52.104579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/get_slides/6175/tik4c7go14rs9uj4.jpg","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.7.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.019Z","timestamp":1724415600019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /get_slides/6175/tik4c7go14rs9uj4.jpg HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: text/vtt\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 23 Aug 2024 09:38:53 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3fSx6YXW%2B6kNOXC0dnBt0JL%2B0zCeK5vuWSuxOfdyc22F6WBo%2F0nRa37%2FnqGDpYm6c707SVM4hat%2BVB4fTj29MUaeL2bbrBBPU8sXgaWJor2BYBOqlb1oSnjCuF%2BX%2Fg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0ddc1afcb523-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3158,"size_decoded":3158,"mime_type":"text/vtt","magic":"ASCII text, with very long lines (3268), with no line terminators","md5":"6c55ad49c898ba903f40d139f7fa79ab","sha1":"ee07749adb622fd1be85007a5799536c9adc0e71","sha256":"2c3c9694e485a089404d234835e84eea81f4c5b7de31c7283c02302490db6dbe","sha512":"df40d979fbd42c42218433ddef4bb493f14602b6f8652e26d09c136abafebde499a3b926d7a381ebdd4cce6a6db2c54afd7dbc8983a4296fd01b29acd63eb066","ssdeep":"","tlshash":"c9617cc1daf91462e2e43720e3fdf857845c61ce7ad020a762fb3054aabab17c3654a5","first_seen":"2024-08-29T18:08:52.105782Z","last_seen":"2024-08-29T18:08:52.105782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/img/close.svg","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.270Z","timestamp":1724415601270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Aug 2024 15:14:55 GMT","end":"Sat, 09 Nov 2024 15:14:54 GMT"},"fingerprint":{"sha1":"EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46","sha256":"C1:A8:56:B5:09:AC:C6:DB:7F:C7:3B:EC:A0:87:F3:95:A4:A9:78:D9:6E:06:44:13:4C:0B:2F:66:D4:D3:E0:C5"}}},"request":{"raw":"GET /sb/ssp/interstitial/center_banner/2/img/close.svg HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\netag: W/\"65aa8501-9c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 6133405\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OtVBbXWQUooUbch4%2B%2BDq02msFUep1CkVd6Bn8KJ86XdVuKzJcjHsBZklY0dAlT1qHCbcajh8vdSA7LzHSChVKFADIJS5gTVKGCouajdKjrKx3%2FFL5KAr1uMffJp%2BTr4xVDDZvcZd2K1N\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0de3e9e856a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2503,"size_decoded":2503,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d05ebade4b5acd19668c0e26c2252d14","sha1":"ced1fb92de4c6e06f54946dbf03349d7e8337150","sha256":"0538059a2b31e76581ee1c105ef9c138a6a6c02a6f44363fad6650be18587fea","sha512":"2c97e38c9494ae3a62ff6dbdf5de3d4baff42369b42099e59fac3dd902b2d8722e90decc077f27daa07c939570c2ad073350cc22f1665e86586ba3e85f2ff011","ssdeep":"","tlshash":"a251e739e2f2a82d5d8dcadcafe40c2c0c50b45a415dc1debacc65229b49521bdbb264","first_seen":"2023-12-05T03:44:27Z","last_seen":"2025-01-08T11:42:39.884827Z","times_seen":301,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.274Z","timestamp":1724415600274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pogothere.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jul 2024 05:27:01 GMT","end":"Mon, 21 Oct 2024 05:27:00 GMT"},"fingerprint":{"sha1":"07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A","sha256":"D9:4B:5E:DE:9F:1B:BC:B8:AD:E7:0B:9B:E6:D4:30:83:5D:4F:4A:4C:B2:A9:F1:92:76:56:7B:F6:4E:58:C1:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.li/\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=763477419542127@1@1724415600; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://dood.li\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fKjRQrdevH%2Bp26gbskVr1TWtPs8dp3M8FnZg6Y%2FfTN%2BuF9cIBLqZo1AQThyOQoazD3PAlwX9hfBkTfGJU8zojpT6VJkoicD5lnbWK2QMRRNeDVEeFdf8Lf%2B3h%2FndWcKV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b7b0dde1d255685-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26,"size_decoded":26,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"0978e0acd169e99ffbf2fbeeb2a035fd","sha1":"3122bdcbbb80b4edd44fc4f57b2bb3b8b6f9f621","sha256":"ef0a205234377a9677cda99e1ad38946ed7612a6f3f2543e1885ff0b48e8754e","sha512":"c790dee5eb3eb40cde3f717435d348b7ab17b0d9f49fcc7326b46cfb9719ff5b094cd13ef3b38e144871fd6c78a422212f9ff599cf7960ade356810b269d808b","ssdeep":"","tlshash":"438000020080b2000f882800ba200b308b2c0000e28e230c0e08e320002020080308a0","first_seen":"2024-08-29T18:08:52.107594Z","last_seen":"2024-08-29T18:08:52.107594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":61,"dns":29,"connect":1,"send":0,"wait":145,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/style.css","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.119Z","timestamp":1724415601119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Aug 2024 15:14:55 GMT","end":"Sat, 09 Nov 2024 15:14:54 GMT"},"fingerprint":{"sha1":"EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46","sha256":"C1:A8:56:B5:09:AC:C6:DB:7F:C7:3B:EC:A0:87:F3:95:A4:A9:78:D9:6E:06:44:13:4C:0B:2F:66:D4:D3:E0:C5"}}},"request":{"raw":"GET /sb/ssp/interstitial/center_banner/2/css/style.css HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\netag: W/\"65aa8501-10a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 3870469\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FP883kpkxWyC3G0XUFuFZvj8E7kVFggP56m%2FPwWJXWVW4Tlu4wOBqIDJ9dp53dR%2Fp3A51TBkrj%2BK4pWSV%2FT3R5PaPxWdb85D8rhju3xVIMD%2FIqm%2Fm70nzWJ%2F6hghU6xQppy0H3m3KNbw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0de368750b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4256,"size_decoded":4256,"mime_type":"text/css","magic":"ASCII text, with very long lines (4467), with no line terminators","md5":"e33e809f2279220b3f8bc46acdf81a4d","sha1":"2a09c94d4901ce3373c7b5311589edba5a4d7be5","sha256":"ab8d29170e5a2787b1033df15b4e35b9f485ebdbbee469d09468f9f64ae6735a","sha512":"d56f9cdcdca05fd6b72794cd4ed6e58650a79181168d7d7e4e1122d99f27deaeaec387b27bbe62008755dde3227054ea7999b34f0f3bdd15746e0fe6c2d01303","ssdeep":"96:WP3EQEb3v85pbhi7Yk5pbhiWfy7SpnrL8JbB:K0LE5pdiJ5pdiKy78nrL8JbB","tlshash":"3891ac2e39031639b013ef552fe60b635229b223d67b617a3bc2674743cb54089da79e","first_seen":"2024-03-12T12:02:35Z","last_seen":"2025-01-08T11:42:39.902038Z","times_seen":136,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":69,"dns":41,"connect":4,"send":0,"wait":8,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3pXAX5W-pYAxPDOa_m00w-wjaQ-RKs_NC69xMzMHqYelLl_cAO_YaAkA2ffoqunhCwgwbvK\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-769790794%3A1724415601108420\u0026ddm=0","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.267Z","timestamp":1724415601267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:32:53 GMT","end":"Tue, 22 Oct 2024 12:32:52 GMT"},"fingerprint":{"sha1":"A9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69","sha256":"06:5E:3B:66:39:0A:5D:3C:7C:E5:1F:27:34:24:42:60:64:53:B3:D9:8E:4D:4E:97:F5:B7:08:B5:9D:19:0A:0A"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3pXAX5W-pYAxPDOa_m00w-wjaQ-RKs_NC69xMzMHqYelLl_cAO_YaAkA2ffoqunhCwgwbvK\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-769790794%3A1724415601108420\u0026ddm=0 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.li/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-Tp13Tn5DuYGkbC6lnfZwPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.NrHcuvGl79o.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3p88E2_iHvKh4VhljxX4AJk4fz5biEZSvxdWTED5LRQjgdYTxwa2zTqNpT2it7ykkcwkqi4\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1993648408%3A1724415601107533\u0026ddm=0","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.264Z","timestamp":1724415601264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:32:53 GMT","end":"Tue, 22 Oct 2024 12:32:52 GMT"},"fingerprint":{"sha1":"A9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69","sha256":"06:5E:3B:66:39:0A:5D:3C:7C:E5:1F:27:34:24:42:60:64:53:B3:D9:8E:4D:4E:97:F5:B7:08:B5:9D:19:0A:0A"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3p88E2_iHvKh4VhljxX4AJk4fz5biEZSvxdWTED5LRQjgdYTxwa2zTqNpT2it7ykkcwkqi4\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1993648408%3A1724415601107533\u0026ddm=0 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.li/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-ALjgoro0IXbY6CsE3cU9qA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.NrHcuvGl79o.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T02:09:46.330384Z","times_seen":16161611,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.barscreative1.com/sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html","fqdn":"cdn.barscreative1.com","domain":"barscreative1.com","tld":"com"},"ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.711Z","timestamp":1724415600711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.barscreative1.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jul 2024 03:01:17 GMT","end":"Sun, 06 Oct 2024 03:01:16 GMT"},"fingerprint":{"sha1":"A2:3E:46:AA:B1:90:A8:AE:3D:15:ED:7F:CA:0F:EF:AF:53:4A:20:65","sha256":"0F:2E:4C:78:49:53:AF:14:F0:C4:A7:8E:90:A9:6A:30:D8:72:F2:56:4E:7D:FB:74:48:E4:04:FB:4C:0D:E1:3C"}}},"request":{"raw":"GET /sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html HTTP/1.1\r\nHost: cdn.barscreative1.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 29 Oct 2023 10:17:36 GMT\r\netag: W/\"653e3140-6f1\"\r\ncache-control: max-age=3600\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nexpires: Fri, 23 Aug 2024 13:20:00 GMT\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ah0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1777,"size_decoded":1777,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1879), with no line terminators","md5":"9c074ba628a488033b36166778e610b5","sha1":"5a612f81115838990e3b8741943f900c97bd3f8f","sha256":"b18c3b575c2be7aa1ee3d73301c049cd4862a206e38ee5eb7651c0026d8cf8b3","sha512":"f9c5f822e1e8608310078d5cace68d3605f8280417557ff7be62deb0155f2dade44f39bf214a7db4e1146640d86714c8b3e8f18f5db19f672f8e52a3ab8d8762","ssdeep":"","tlshash":"4b41fb662cdd45761582d59c6b312e6fac91f2848dab5902337c4e9443dbdaccca7603","first_seen":"2023-12-05T03:44:27Z","last_seen":"2025-01-27T20:36:22.336045Z","times_seen":139,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":83,"dns":33,"connect":19,"send":0,"wait":46,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/asd100.bin","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:00.272Z","timestamp":1724415600272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pogothere.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jul 2024 05:27:01 GMT","end":"Mon, 21 Oct 2024 05:27:00 GMT"},"fingerprint":{"sha1":"07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A","sha256":"D9:4B:5E:DE:9F:1B:BC:B8:AD:E7:0B:9B:E6:D4:30:83:5D:4F:4A:4C:B2:A9:F1:92:76:56:7B:F6:4E:58:C1:F3"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.li/\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:00 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://dood.li\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4177\r\nlast-modified: Fri, 23 Aug 2024 11:10:23 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QgoWiW7gsZ1WWYLMmJ3I%2BoIBuUWHOteUEJJ1Co5%2FG%2BCLQdK6eeA6XOeVzBl1cki5zZLPfaXoX3YPXAR2H9v9hqRQ0NOuCyqp3LmUox1otMkZRRB96mLgcSwy2%2F%2FFR5L2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0dde2d455685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":102400,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":70,"dns":29,"connect":4,"send":0,"wait":15,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/script.js","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.735Z","timestamp":1724415601735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Aug 2024 15:14:55 GMT","end":"Sat, 09 Nov 2024 15:14:54 GMT"},"fingerprint":{"sha1":"EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46","sha256":"C1:A8:56:B5:09:AC:C6:DB:7F:C7:3B:EC:A0:87:F3:95:A4:A9:78:D9:6E:06:44:13:4C:0B:2F:66:D4:D3:E0:C5"}}},"request":{"raw":"GET /sb/ssp/interstitial/center_banner/2/js/script.js HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\netag: W/\"65aa8501-3cf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 3870469\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5AZtclDtnVDYHJ%2Fg4JEhZZZ5YHwFyalDfbjJJWBwwn0zPVOPEKp1DHBrjVMknxrX06WYLo8%2FTrdtaoUIkdUNH%2B9PISfRcd4kx%2F4oSHG4sxrQ1Gfan7I5JraR1aLUty7tPiEm45VMJ0f2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0de6cde056a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":975,"size_decoded":975,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1026), with no line terminators","md5":"56f5217ee29771ce2ae4c86ff026496c","sha1":"9b3780593c5dce75b397078fcc2005b4d81aaf25","sha256":"00233eef52d4b6024e389215842798af314a85d0e50ca433ee4cfd472cdf15ca","sha512":"f1776f0aa22e509c2f95c7c2527ff7fad82bdf5fd10988b8af42e0ae46b182415c008b05b539ef87a05bf996e89cc879039219d71b043169e03dd344f668e53d","ssdeep":"","tlshash":"71113b372518c2b46246f26ba27725f6e93322acd427430b3a1c098f0ad5761a7d56f6","first_seen":"2023-12-05T03:44:27Z","last_seen":"2025-01-08T20:54:28.49904Z","times_seen":389,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waisheph.com/5/6936539/?oo=1\u0026aab=1","fqdn":"waisheph.com","domain":"waisheph.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.639Z","timestamp":1724415599639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"waisheph.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Aug 2024 00:37:21 GMT","end":"Mon, 18 Nov 2024 00:37:20 GMT"},"fingerprint":{"sha1":"68:94:2B:35:6C:6A:DF:A9:03:5C:1C:8B:30:7E:DC:82:BE:43:C7:55","sha256":"57:A7:3F:AB:EB:21:B0:BE:6E:EB:41:6E:14:67:F7:A5:9D:1E:1E:AF:9E:10:77:D4:BD:0D:FA:F3:4B:5E:3B:9E"}}},"request":{"raw":"GET /5/6936539/?oo=1\u0026aab=1 HTTP/1.1\r\nHost: waisheph.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.li\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: application/json\r\nx-trace-id: 420a8f217c05f5b9a1fd4ccae257f13b\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://yonmewon.com\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://sr7pv7n5x.com\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://dood.li\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=0080c138acc54b56e2fe20eab31f0b53; expires=Sat, 23 Aug 2025 12:19:59 GMT; path=/; secure; SameSite=None\noaidts=1724415599; expires=Sat, 23 Aug 2025 12:19:59 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4169,"size_decoded":4169,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (4173), with no line terminators","md5":"ed262d2c993c8c0baacd7efbbe71adeb","sha1":"bc22a8f4c42b7a521e17611f09cc123c9d7fa027","sha256":"23071c1670a47ae2de5284c8fbd25794908ace2bf0bd8609a7bdfebb6468336a","sha512":"fe3e7ba8dcb15c1117dbcdc2ca2e8847e832b9aaa425571311481f9cbc50b0b869d67c9460ac69c3c49df39db92dfe9311038fbf1a79b89cd7207649426c0cb1","ssdeep":"96:sN8Hoss2sMNRag412wg4FWJgE1NH30o9M8ZyIbqBjGLsLpwhxjQahh65b2:sN8eMNH412SFWJFbEo9pbqlGYdw9hMC","tlshash":"9681eb208fe2bd4d8c9bc6155e3cf62c41afe0e2939dd2998e78de0c359034308bb654","first_seen":"2024-08-29T18:08:52.115221Z","last_seen":"2024-08-29T18:08:52.115221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":107,"dns":8,"connect":30,"send":0,"wait":29,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:58.700Z","timestamp":1724415598700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 17 May 2024 16:59:31 GMT","end":"Tue, 12 Nov 2024 22:59:00 GMT"},"fingerprint":{"sha1":"30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A","sha256":"D5:FB:5B:81:F4:D0:FF:26:31:88:87:19:CA:1E:08:77:DD:FB:C0:A3:CA:82:56:DC:9A:51:42:9D:26:F4:21:53"}}},"request":{"raw":"GET /aas/r45d/vki/1999414/126a6d05.js HTTP/1.1\r\nHost: blurbreimbursetrombone.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 20 Aug 2024 10:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66c46982-2043a\"\r\nx-js-ab2: var535\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131988,"size_decoded":131988,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65010)","md5":"36d23fda45375854c5a348cbd57685ab","sha1":"242bf3eaae0ad9bfe98e3e8636d0437eca4a5308","sha256":"f43914f154147131777247d2d3e8ded058641629edf287d1c44c7f325315531b","sha512":"e3da0beb5dde52a00b9214f661b19b8cd5919a3d581281d105cc059bb334a59103aac1dc2e080fb24b35582f623b0e3b241c8f9abd4daa25fc56aeecd0ff8081","ssdeep":"1536:zWTyQvha6YG0HQ5K3G5ArWtSbYMT9tzmZkpSwq3zHceiCym/2qFPJTcZyj6L6m3G:zWmQxYG0HcKCExtzmZk8wq3zHXi0Bekv","tlshash":"0ad3ea8b6e9569b90903a0e755fa9042785ef85f6cc84764b02dd2cbfef4214c13ab73","first_seen":"2024-08-29T18:08:52.116688Z","last_seen":"2024-08-29T18:08:52.116688Z","times_seen":1,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":58,"connect":24,"send":0,"wait":34,"receive":0,"ssl":390},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/jquery.min.js","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:20:01.274Z","timestamp":1724415601274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Aug 2024 15:14:55 GMT","end":"Sat, 09 Nov 2024 15:14:54 GMT"},"fingerprint":{"sha1":"EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46","sha256":"C1:A8:56:B5:09:AC:C6:DB:7F:C7:3B:EC:A0:87:F3:95:A4:A9:78:D9:6E:06:44:13:4C:0B:2F:66:D4:D3:E0:C5"}}},"request":{"raw":"GET /sb/ssp/interstitial/center_banner/2/js/jquery.min.js HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 23 Aug 2024 12:20:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\netag: W/\"65aa8501-149a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 6138836\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h0dDWBGKo%2BCj4OynNkd2XrxXUxgX4zYNRsWAAwerpL%2B%2BOT4lLaHqNvcxipk%2BSTGAns9n%2B30oB8N5Zty%2BpHJDZboJkr3qkGcvnlr%2BwXc70M2Fa9h3VZmD%2BVz598IdkByFqiLR%2FdXbl9hu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b7b0de3e9f756a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84384,"size_decoded":84384,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-06-06T01:08:44.523186Z","times_seen":11985,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/check.html","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dood.li/e/2acf7ajdrlaw","date":"2024-08-23T12:19:59.869Z","timestamp":1724415599869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 17 May 2024 16:59:31 GMT","end":"Tue, 12 Nov 2024 22:59:00 GMT"},"fingerprint":{"sha1":"30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A","sha256":"D5:FB:5B:81:F4:D0:FF:26:31:88:87:19:CA:1E:08:77:DD:FB:C0:A3:CA:82:56:DC:9A:51:42:9D:26:F4:21:53"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: blurbreimbursetrombone.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.li/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Aug 2024 12:19:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 30 Jul 2024 10:01:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a8b9fd-394\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":916,"size_decoded":916,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (956), with no line terminators","md5":"95b931540a96c4d45344472f87f81036","sha1":"7f1c2eae3c09448aa6f8d85f66484439623c520a","sha256":"2ecb5d3152a38f9abb6f14dac557682756b243462770f69a14c4c2b8cf0726d1","sha512":"8a6728b5f2308240681c7a374ee96dd957bc70e6d0a09dc1642f452dc84e8f7a1818c7e9be615ee94b01d04f883ac3f49ffad502c84924f8e4787455b97bf03a","ssdeep":"","tlshash":"c111ba1a38a4646c4213bfb02be762682c32764025d7d01dbf5c97321f826a7dc796ef","first_seen":"2024-06-17T18:45:41Z","last_seen":"2024-11-21T06:40:10.752731Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}